{"id":2431,"date":"2022-03-09T16:33:00","date_gmt":"2022-03-09T23:33:00","guid":{"rendered":"https:\/\/wpsites.ucalgary.ca\/isec-601-f21\/?p=2431"},"modified":"2022-03-09T16:33:03","modified_gmt":"2022-03-09T23:33:03","slug":"samsung-just-had-a-data-breach-of-190gb","status":"publish","type":"post","link":"https:\/\/wpsites.ucalgary.ca\/isec-601-f21\/2022\/03\/09\/samsung-just-had-a-data-breach-of-190gb\/","title":{"rendered":"Samsung just had a data breach of 190GB"},"content":{"rendered":"\n

On Monday, it was confirmed by Samsung that they had a data breach that exposed internal company data relating to the company’s line of Smartphones, Galaxy.<\/p>\n\n\n\n

\"\"
Samsung Galaxy logo<\/figcaption><\/figure>\n\n\n\n

The incident was first reported at the end of last week, when data extortion group Lapsus$ leaked nearly 190GBs of data that they claimed were stolen from Samsung Electronics. The same group was also responsible for another data breach at Nvidia last month, when 71,000 employee credentials were stolen with some of them being leaked online, after Nvidia refused to meet the groups demands. Those demands being to open-source their GPU drivers and to remove the Ethereum mining cap on their GPUs.<\/p>\n\n\n\n

The group first posted a snapshot of C\/C++ directives in Samsung software as a teaser for its followers. <\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Shortly after, they released a description of the upcoming leak, which included source code for trusted applets installed within TrustZone (which is used for sensitive operations like access control), algorithms for biometric authentication, bootloaders for recent devices, and even confidential data from Samsung’s chip supplier, Qualcomm. The data was later made available in a torrent, with more than 400 peers sharing the content. The group even said that they would deploy more servers to further increase the download speed.<\/p>\n\n\n\n

Access to source code can help malicious parties find security vulnerabilities, which potentially opening affected devices or systems to exploitation.<\/p>\n\n\n\n

A spokesperson for Samsung stated that the security breach was related to some internal company data but said no personal data belonging to customers or employees were included. <\/p>\n\n\n\n

\u201cAccording to our initial analysis, the breach involves some source code relating to the operation of Galaxy devices, but does not include the personal information of our consumers or employees,\u201d Samsung said. \u201cCurrently, we do not anticipate any impact to our business or customers. We have implemented measures to prevent further such incidents and will continue to serve our customers without disruption.\u201d<\/p>\n\n\n\n

When asked to comment, Qualcomm stated that they are working with Samsung to understand the scope of the incident, and confirm what Qualcomm data was stolen. They also stated they they do not believe that any of their systems or security has been impacted.<\/p>\n\n\n\n

Casey Bisson, head of product and developer relations at BluBracket, told threatpost via email that \u201cIf Samsung\u2019s keys were leaked, it could compromise the TrustZone environment on Samsung devices that stores especially sensitive data, like biometrics, some passwords and other details,\u201d and also adding that \u201cIf Samsung has lost control of the signing keys, it could make it impossible for Samsung to securely update phones to prevent attacks on the TrustZone environment.\u201d<\/p>\n\n\n\n

Unlike their previous data breach with Nvidia, it is unclear whether the group made any demands to Samsung before releasing the data, as Samsung did not mention if the group made any ransoms.<\/p>\n\n\n\n

In conclusion, Samsung has stated that there has been no impact to its business or its customers caused by the data breach, but the contents of the leaked data has serious implications on the security of Samsung Galaxy devices in the future. <\/p>\n\n\n\n

REFERENCES<\/p>\n\n\n\n

https:\/\/thehackernews.com\/2022\/03\/samsung-confirms-data-breach-after.html<\/a><\/p>\n\n\n\n

https:\/\/www.bleepingcomputer.com\/news\/security\/hackers-leak-190gb-of-alleged-samsung-data-source-code\/<\/a><\/p>\n\n\n\n

https:\/\/www.bleepingcomputer.com\/news\/security\/hackers-leak-190gb-of-alleged-samsung-data-source-code\/<\/a><\/p>\n\n\n\n

Samsung Confirms Lapsus$ Ransomware Hit, Source Code Leak<\/a><\/blockquote>