Nvidia says its “own information” is leaked by hackers

Nvidia has confirmed that it was hacked – and that the actor behind last week’s “incident” is leaking employee credentials and his own information on the Internet. In a statement to PCMag, Bloombergand VideoCardzThe company says it learned of the violation on February 23 and that “it does not expect an interruption of [its] business or our ability to serve our customers as a result of the incident. “

The hacker group Lapsus $ claimed responsibility for the attack and asked Nvidia to make its drivers open source if it did not want more data to leak. Nvidia does not have to agree to these requests; the company says it has made security improvements, notified law enforcement and is working with cybersecurity experts to respond to the attack.

Lapsus $ claims to have about terabytes of data from Nvidia, according to PCMag. In a message seen by On the edge, hackers say that only the hardware folder is 250 GB and contains information about “all recent Nvidia GPUs”, including the mysterious RTX 3090 Ti. In an earlier statement, the group threatened to leak the files if Nvidia did not remove restrictions on its latest graphics cards, which aim to make them less attractive to cryptocurrencies. Lapsus $ updated its requirements today, adding Nvidia’s requirement to make its GPU drivers completely open source, and said the company has until Friday to make a decision.

image

A message from the hacker group, updating its demands to Nvidia.

After Nvidia confirmed that it was investigating an incident, there was speculation that ransom software was involved and that the attack could be linked to the Russia-Ukraine conflict. However, Nvidia says there is no evidence that any of these things are true.

This was said by Toby Lewis, Head of Threat Analysis at Darktrace On the edge that “the previous goals of the alleged hacker group and the almost local use of Spanish and Portuguese in previous ransom notes suggest that [it] He also said the group was “top secret” and that its attack on Nvidia seemed to be taking advantage of the confusion caused by everything that was happening, not motivated by ties to the Russian government.