NVIDIA hackers reportedly have obtained 190GB of sensitive data from Samsung

Embed from Getty Images

One-hundred ninety gigabytes of Samsung's confidential data might have been reportedly leaked due to a suspected cyberattack. On Friday, South American hacking group Lapsus$, the same group who claimed responsibility for a recent NVIDIA data breach, uploaded a trove of data it claims came from Samsung. It reportedly contains bootloader source code for all of the company's recent devices, including code related to highly-sensitive features like on-device encryption and biometric authentication. It also supposedly includes confidential data from Qualcomm.

Samsung says it is assessing the situation. The hacker group hasn't made any demands from the company, unlike the NVIDIA breach. Lapsus$ demanded that NVIDIA open source its drivers and remove the cryptocurrency mining limiter from its RTX 30-series GPUs.

Source: 1 + 2

Hundreds of Instagram users report falling prey to similar account hack

Screenshot from Chris Woznicki, one of the victims of this new Instagram hack

A bizarre hack seems to be hitting Instagram users this month with users getting logged out and their personal details changed. The users discover their accounts being signed out, their handles and profile photos changed (often to a Disney or Pixar character), bios deleted, and the accounts are now linked to an .ru email address (a Russian domain). Most of the people Mashable talked to did not have two-factor authentication turned on, but one said he had it enabled but it was disabled and his account was still hacked. Aside from changing personal information, the hackers don’t seem to be posting or removing any photos from the accounts. No one seems to be claiming the hack just yet.

The difficulty for those hacked though is that it’s more difficult to get back into their accounts with the changed personal details. And it seems Instagram’s largely automated process of trying to get back into the accounts prove to be inadequate. Abagail Nowak, one of the victims of the hack describes it as a “maze.” She says, “The maze that Instagram sends you on to get your account back is laughable and leads to broken/dead links and emails from robots which lead nowhere.” Instagram hasn’t responded to requests for comments on the hack but we’ll report back when we hear more.

Source: CNET

Two French teenagers get arrested for defacing popular music videos on Vevo’s YouTube page

Last month, Vevo’s YouTube account got hacked and had defaced a number of popular music videos. Now, two 18-year-old French citizens have been arrested in Paris in relation to this incident. The Paris Prosecutor’s Office, together with the Manhattan’s DA’s office (where Vevo is based), identified the two suspects as “Nassim B.” and “Gabriel K.A.B.” and are known by their respective online handles of “Prosox” and “Kuroi’ish.” The two have been charged with six and five criminal counts, respectively.

Authorities claim the two gained access to Vevo’s YouTube account to change the thumbnail images, video titles, and descriptions of videos like Luis Fonsi’s “Despacito” and other popular videos from the likes of Taylor Swift, Shakira, Selena Gomez, to name a few. Vevo has since removed all these changes.

Source: Variety

Forever 21 confirms hackers breached their payment system

Bad news for you Forever 21 shoppers in the US. The retailer just confirmed that hackers have breached “various point of sales terminals” throughout the country and were able to collect “credit card numbers, expiration dates, verification codes and sometimes cardholder names” covering the dates April 3 to November 18, 2017. Forever 21 detailed in a statement how hackers were able to install malware software on some of its POS terminals. They first disclosed this back in November 14, but this is the first time they’ve gone into detail about how the attack went down.

It seems that the encryption was turned off for some machines that logged payment card details from transactions at certain times and this was when the hackers installed malware to get the data. Some were said to be affected for days or weeks, but others could’ve been affected for the duration they stated. They didn’t specify how much information the hackers got. But they did say they’re looking into whether Forever 21 stores outside the US have been affected. But with those using different POS systems, this might be an unlikely scenario. Now is the time though to remind you to always check your credit card transactions to see if there are any purchases you didn’t make.