{"id":439368,"date":"2022-03-30T13:58:29","date_gmt":"2022-03-30T11:58:29","guid":{"rendered":"https:\/\/mybroadband.co.za\/news\/?p=439368"},"modified":"2022-03-30T14:00:53","modified_gmt":"2022-03-30T12:00:53","slug":"lapsus-claims-responsibility-for-attack-on-software-giant-globant","status":"publish","type":"post","link":"https:\/\/mybroadband.co.za\/news\/security\/439368-lapsus-claims-responsibility-for-attack-on-software-giant-globant.html","title":{"rendered":"Lapsus$ claims responsibility for attack on software giant Globant"},"content":{"rendered":"<p>Prolific hacking group Lapsus$ has claimed responsibility for an attack on Luxembourg-based software development consultancy Globant, despite seven of their alleged members being arrested.<\/p>\n<p>Lapsus$ previously asserted that they attacked Microsoft, Nvidia, Okta, and Samsung. It leaked data apparently stolen during the attacks on its public Telegram channel.<\/p>\n<p>Security researcher Dominic Alvieri <strong><a href=\"https:\/\/twitter.com\/AlvieriD\/status\/1509009949812310019\" target=\"_blank\" rel=\"noopener\">reported<\/a><\/strong> that Lapsus$ leaked 70GB of data from Globant.<\/p>\n<p>Globant is a global consultancy firm with over 30 major clients in the private and public sectors.<\/p>\n<p>Alvieri said that the directory structure of the data in the leak contains Facebook, DHL, BNPParibas, and Abbott. There is also a folder called \u201capple-health-app\u201d.<\/p>\n<p>The extent of the data contained within these directories is currently unknown.<\/p>\n<p>Additionally, Lapsus$ also leaked the passwords of several of Globant\u2019s system administrators.<\/p>\n<p>VX-Underground, a group that analyses malware trends, <a href=\"https:\/\/twitter.com\/vxunderground\/status\/1509015154930896899\" target=\"_blank\" rel=\"noopener\"><strong>said<\/strong><\/a> Lapsus$ \u201cthrew [Globant\u2019s] system admins under the bus\u201d by exposing that they used incredibly weak passwords for several of their internal systems.<\/p>\n<p>The hacking group publicly posted administrator passwords for Globant\u2019s internal Confluence, Crucible, Jira, and Github systems.<\/p>\n<p>Security researcher Bill Demirkapi has also <a href=\"https:\/\/twitter.com\/BillDemirkapi\/status\/1508527487655067660\" target=\"_blank\" rel=\"noopener\"><strong>revealed<\/strong><\/a> new information regarding the Lapsus$ attack on Okta.<\/p>\n<p>According to Demirkapi, he obtained a copy of the Mandiant report, which detailed how the hacking group was able to breach the company\u2019s internal systems and what they did once they had access.<\/p>\n<p>He said the report states that Lapsus$ downloaded malware, terminated security software processes, and other acts of cyber-sabotage.<\/p>\n<p>Lapsus$ may also have gained access to Okta\u2019s Domain Administrators credentials by downloading a file called \u201cDomAdmins-LastPass.xlsx\u201d from a compromised system.<\/p>\n<p>MyBroadband contacted Globant for comment, but it did not respond by the time of publication.<\/p>\n<hr \/>\n<h3 class=\"my-4\">Now Read: <a href=\"https:\/\/mybroadband.co.za\/news\/security\/439142-whatapp-privacy-under-threat.html\" target=\"_blank\" rel=\"noopener\">WhatsApp privacy under threat<\/a><\/h3>\n","protected":false},"excerpt":{"rendered":"<p>Prolific hacking group Lapsus$ has claimed responsibility for an attack on Luxembourg-based software development consultancy Globant, despite seven of their alleged members being arrested.<\/p>\n","protected":false},"author":341098,"featured_media":439376,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_sma_x_autopost_status":"idle","_sma_x_autopost_error":"","_sma_x_post_id":"","_sma_facebook_post_id":"","_sma_instagram_post_id":"","_sma_threads_post_id":"","_sma_x_attempts":0,"footnotes":""},"categories":[27],"tags":[77568,605,77570,77566,50043,23974,77560,161,77558,77072,123,3838,77564,645,77562],"class_list":["post-439368","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security","tag-abbott","tag-apple","tag-bill-demirkapi","tag-bnpparibas","tag-data-leak","tag-dhl","tag-dominic-alvieri","tag-facebook","tag-globant","tag-lapsus","tag-microsoft","tag-nvidia","tag-okta","tag-samsung","tag-vx-underground"],"_links":{"self":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/439368"}],"collection":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/users\/341098"}],"replies":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/comments?post=439368"}],"version-history":[{"count":1,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/439368\/revisions"}],"predecessor-version":[{"id":439380,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/439368\/revisions\/439380"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media\/439376"}],"wp:attachment":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media?parent=439368"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/categories?post=439368"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/tags?post=439368"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}