The UK has convicted teen Lapsus$ hackers Arion Kurtaj, 18, and an unnamed 17-year-old for their involvement in cyberattacks against Nvidia, Uber, Rockstar Games, and other tech companies, according to the BBC.
Major broadband firm BT and mobile operator EE have been compromised by Kurtaj and the 17-year-old with the help of other Lapsus$ group members, who demanded $4 million in ransom on Aug. 1, 2021, or a month after the teens began hacking together.
Nearly 100,000 worth of cryptocurrency was also stolen by the teens through the use of stolen SIM data.
Despite being later arrested in January 2022, both teens later engaged in the hack of Nvidia the following month, which resulted in the theft of sensitive data. After being re-arrested in March 2022, Kurtaj continued to launch attacks against Uber, Revolut, and Rockstar Games in a hotel room where he stayed while on bail.
All data for Rockstar's Grand Theft Auto 6 game have been downloaded in the hack.
Teen Lapsus$ hackers found guilty of high-profile cyberattacks
The UK has convicted teen Lapsus$ hackers Arion Kurtaj, 18, and an unnamed 17-year-old for their involvement in cyberattacks against Nvidia, Uber, Rockstar Games, and other tech companies, according to the BBC.
Attackers purporting to be Royal Mail distributed malicious emails about a failed package delivery with a PDF attachment that included a link redirecting to a Dropbox-hosted ZIP file, which then facilitated the execution of Prince ransomware.
Such websites, which are operated under "AI Nude" and are advanced by black hat SEO techniques, promise the conversion of uploaded photos into deepfake nudes but display a link, which when clicked redirected to another site with the password and link to the password-protected Dropbox-hosted archive that contains the infostealer malware.
Both iOS and Android devices have been targeted with attacks involving the fake app dubbed "SB-INT," which lured victims into manually trusting the Enterprise developer profile before triggering the registration process that would seek additional information from victims.