Microsoft confirms Lapsus$ hackers stole source code via ‘limited’ access
by Mitchell Clark from The Verge - All Posts on (#5XD7N)
Malware makers have already exploited other certificates released by Lapsus$. | Image by Alex Castro / The Verge The hacking group Lapsus$, known for claiming to have hacked Nvidia, Samsung, and more, this week claimed it has even hacked Microsoft. The group posted a file that it claimed contains partial source code for Bing and Cortana in an archive holding nearly 37GB of data.
On Tuesday evening, after investigating, Microsoft confirmed the group that it calls DEV-0537 compromised a single account" and stole parts of source code for some of its products. A blog post on its security site says Microsoft investigators have been tracking the Lapsus$ group for weeks, and details some of the methods they've used to compromise victims' systems. According to the Microsoft Threat Intelligence Center (MSTIC), the objective of DEV-0537 actors is to gain...