The LAPSUS$ hacking group has successfully infiltrated Nvidia, Samsung, Okta, and Microsoft, so it surprised security researchers when they discovered the group seems to be run by a 16-year-old.
As Bloomberg reports, four security researchers asked to investigate the LAPSUS$ hacks have traced the activity back to a teenager living with his mother near Oxford in England. In total, seven individuals have been tied to the group, with another being a teenager in Brazil.
For now, the researchers don't have enough conclusive evidence to be certain the Oxford teenager carried out all LAPSUS$-claimed hacks, but the forensic evidence gathered certainly suggests he's the mastermind. Due to his age and the ongoing investigation, the teenager's real name isn't being divulged. Online, he's known as "White" or "breachbase."
Although the group has repeatedly proven it's very good at extracting information from companies, it's quite sloppy when it comes to protecting the identity of its members. Full details of where the teenager lives in Oxford, all his personal information, and that of his parents have been published online by other hackers.
Bloomberg visited the home and spoke to the mother who wasn't aware of the accusations her son is facing. She ended the interview (through a doorbell intercom) by stating she was going to phone the police. For now, the FBI, National Crime Agency, and Thames Valley Police are either not responding or declining to comment on Bloomberg's requests over the matter.
Sign up for Security Watch newsletter for our top privacy and security stories delivered right to your inbox.
This newsletter may contain advertising, deals, or affiliate links. Subscribing to a newsletter indicates your consent to our
Read more on pcmag.com