Samsung Electronics appears to have had a severe security vulnerability. The hackers responsible for this incident claim to have exposed 190GB of data, including source code and biometric unlocking algorithms.
The South Korean IT behemoth was attacked with a security compromise early this month, according to a Bleeping Computer report (via Apple Insider). Lapsus$, the gang behind this hacking event, claimed to have taken a substantial quantity of data from Samsung Electronics. If this information is correct, it indicates that the brand has a significant security problem. Furthermore, the organisation foreshadowed the data breach on Friday with a screenshot showing C/C++ instructions in Samsung software.
In addition, the organisation stated in the description that the breach contained "secret Samsung source code." According to reports, this file contains the source code for every Trusted Applet in Samsung's TrustZone environment, which is in charge of all critical activities like as hardware encryption and access control. Other sensitive material included in the leak include biometric unlock operation methods, the bootloader source code for current devices, activation server source code, and the whole source code required to authenticate and approve Samsung accounts.
As of present, it is also suspected that some secret Qualcomm source code has been released. The hacking gang has distributed the hacked material via torrents; however, it is yet uncertain how much data the group has obtained. It's also unclear whether the organisation intended to demand a ransom for this sensitive information from the firm. Samsung executives have stated that they are reviewing the whole situation in relation to the breach, so we'll have to wait and see what action the company takes in the coming weeks.
