The gang, which claims attacks on tech giants such as Samsung and Microsoft, are increasingly in the crosshairs of researchers.
The Lapsus$ cyber-gang has been in the spotlight in recent weeks, with hacks from not just Microsoft and Samsung, but also Nvidia, Okta, and possibly a host of others. Therefore, it is logical that the net of many researchers is also slowly starting to close.
One possible suspect now turns out to be a British teenager, according to Bloomberg news agency. “Four investigators commissioned by attacked companies to investigate the group believe this teen is the brain,” Bloomberg said in a report. The 16-year-old uses online aliases such as ‘White’ and ‘breach base’ but has not been charged by police forces. It is currently uncertain whether he is linked to any of the Lapsus$ attacks.
Researcher Brian Krebs, who is usually well informed, also talks about a British member of Lapsus$, who owned the Doxbin site under the aliases ‘Oklaqq’ and ‘WhiteDoxbin’. On that site, people can post and look up victims’ personal information to ‘doxxing’ them or reveal details such as their address to harass them.
According to Krebs, WhiteDoxbin had to sell the site against his will, and so he leaked all of the unpublished data from the site. The Doxbin community, in turn, made WhiteDoxbin’s data public. This includes videos taken in the UK, presumably at WhiteDoxbin’s home.
Krebs also links that WhiteDoxbin to a DDoS attack on game developer EA and the alias ‘breachbase’ so that it may be the same teenager as the one Bloomberg writes about. According to Bloomberg, there would be six other members in addition to the British teenager, including a teenager in Brazil.
