Man
Professional
- Messages
- 3,114
- Reaction score
- 678
- Points
- 113
IntelBroker hacker has penetrated the heart of NOKIA – but is he bluffing?
Nokia launched an investigation after information appeared that a hacker of IntelBroker put up for sale the company's stolen source code.
According to Nokia, an unauthorized person claims to have gained access to data belonging to a third party, and possibly Nokia itself. At the moment, the company has found no signs of compromise of systems or data, but continues to monitor the situation closely.
The incident attracted attention after IntelBroker claimed to have accessed Nokia's source code through a third-party contractor's server. According to the hacker, the target of the attack was a partner who collaborated with Nokia in the development of internal tools. As a result, the attacker allegedly obtained SSH keys, source code, RSA keys, BitBucket accounts, SMTP, webhooks, and hardcoded credentials.
IntelBroker explained that access to the third-party contractor's SonarQube server was obtained through the use of standard credentials. This made it possible to download Python projects, among which there are allegedly Nokia developments. BleepingComputer provided Nokia with a file structure from the hacker's post, but the company has not yet given an official response.
IntelBroker post on Nokia source code theft (source: BleepingComputer)
IntelBroker is known for a series of high-profile leaks, including the hacking of DC Health Link, an organization that provides health insurance for employees of the US Congress. In addition, IntelBroker has been linked to data breaches by companies such as Hewlett Packard Enterprise (HPE) and the energy company General Electric (GE).
Recently, IntelBroker became involved in new incidents during which data from T-Mobile, AMD and Apple were leaked. These leaks also occurred as a result of the hacking of third-party SaaS service providers.
Source
Nokia launched an investigation after information appeared that a hacker of IntelBroker put up for sale the company's stolen source code.
According to Nokia, an unauthorized person claims to have gained access to data belonging to a third party, and possibly Nokia itself. At the moment, the company has found no signs of compromise of systems or data, but continues to monitor the situation closely.
The incident attracted attention after IntelBroker claimed to have accessed Nokia's source code through a third-party contractor's server. According to the hacker, the target of the attack was a partner who collaborated with Nokia in the development of internal tools. As a result, the attacker allegedly obtained SSH keys, source code, RSA keys, BitBucket accounts, SMTP, webhooks, and hardcoded credentials.
IntelBroker explained that access to the third-party contractor's SonarQube server was obtained through the use of standard credentials. This made it possible to download Python projects, among which there are allegedly Nokia developments. BleepingComputer provided Nokia with a file structure from the hacker's post, but the company has not yet given an official response.
IntelBroker post on Nokia source code theft (source: BleepingComputer)
IntelBroker is known for a series of high-profile leaks, including the hacking of DC Health Link, an organization that provides health insurance for employees of the US Congress. In addition, IntelBroker has been linked to data breaches by companies such as Hewlett Packard Enterprise (HPE) and the energy company General Electric (GE).
Recently, IntelBroker became involved in new incidents during which data from T-Mobile, AMD and Apple were leaked. These leaks also occurred as a result of the hacking of third-party SaaS service providers.
Source
