Lapsus$ sahifasining manbasini koʻrish

{{Tashkilot bilgiqutisi
| name = Lapsus$
| type = Kiberjinoiy toʻda
| faoliyati = [[SpearPhishing]], [[SIM-kartalarni almashtirish]], ijtimoiy tarmoqlar orqali sheriklar yollash
| founded = {{circa}} 2021
| headquarters = xalqaro
| membership = 7 kishi (tax. 2022-yil mart)
}}'''Lapsus$''' (stillanishi: '''''LAPSUS$'''''; [[Microsoft]]: '''''DEV-0537''''')<ref>{{Veb manbasi |sarlavha=DEV-0537 criminal actor targeting organizations for data exfiltration and destruction |url=https://www.microsoft.com/security/blog/2022/03/22/dev-0537-criminal-actor-targeting-organizations-for-data-exfiltration-and-destruction/ |ish=Microsoft Security Blog |qaralgan sana=24 March 2022 |sana=22 March 2022}}</ref> — tovlamachilikka bilan shugʻullanuvchi<ref name="microsoft/security-insider/defending">{{Veb manbasi |sarlavha=Defending against attacks |url=https://www.microsoft.com/en-us/security/business/security-insider/uncategorized/defending-attacks/ |ish=Security Insider |nashriyot=[[Microsoft]] Security |qaralgan sana=8 October 2022 |til=en |sana=22 August 2022}}</ref> xalqaro xakerlar guruhi. Ushbu guruh kompaniyalar va davlat idoralariga qarshi turli [[Kiberhujum|kiberhujumlari]] bilan tanilgan.

Aksariyat xakerlik guruhlaridan farqli o‘laroq, Lapsus$ jamoatchilik bilan muloqot qilish uchun [[Telegram]] messenjeridan foydalanishi, jumladan yangi sheriklar yollash va o‘z qurbonlari haqida maxfiy maʼlumotlarni joylashtirishi bilan mashhur<ref name="Krebs">{{Veb manbasi |sarlavha=A Closer Look at the LAPSUS$ Data Extortion Group |ism=Brian |muallif=Krebs |url=https://krebsonsecurity.com/2022/03/a-closer-look-at-the-lapsus-data-extortion-group/ |ish=Krebs On Security |qaralgan sana=24 March 2022 |sana=23 March 2022}}</ref>. Guruhning tarkibi toʻliq ochiqlanmagan; ularning kamida ikkitasi oʻsmirlar hisoblanadi. Lapsus$ hujum vektori [[Ijtimoiy muhandislik (xavfsizlik)|ijtimoiy muhandislik]]ka asoslangan. Guruh nishondagi tashkilotdagi kerakli xodimning hisob maʼlumotlarini olgandan soʻng, turli xil vositalar, shu jumladan [[Masofaviy dasturiy ta'minot|masofaviy ish stoli]] vositalaridan foydalanish orqali nozik maʼlumotlarni olishga harakat qiladi.

Lapsus$ bilan bogʻliq boʻlgan dastlabki yirik kiberhujum 2021-yil dekabrida [[Braziliya Sogʻliqni saqlash vazirligi]]ning kompyuter tizimlariga qarshi amalga oshirilgan<ref name="ReutersBrazil">{{Veb manbasi |sarlavha=Brazil health ministry website hit by hackers, vaccination data targeted |url=https://www.reuters.com/technology/brazils-health-ministry-website-hit-by-hacker-attack-systems-down-2021-12-10/ |ish=Reuters |qaralgan sana=24 March 2022 |til=en |sana=11 December 2021}}</ref>. 2022-yil mart oyida guruh yirik texnologiya kompaniyalariga, jumladan [[Microsoft]], [[Nvidia]] va [[Samsung]] kabi yirik biznes magnatlariga qarshi bir qator kiberhujumlar bilan shuhrat qozondi. Kiberhujumlardan soʻng, [[London shahar politsiyasi]] Lapsus hisoblaridagi pullarga nisbatan politsiya tergovi doirasida yetti nafar gumonlanuvchi hibsga olinganini eʼlon qildi<ref>{{Veb manbasi |url=https://www.theverge.com/2022/3/24/22994563/lapsus-hacking-group-london-police-arrest-microsoft-nvidia |sarlavha=Seven teenagers arrested in connection with the Lapsus$ hacking group |ism=Jay |muallif=Peters |sana=24 March 2022}}</ref>. Guruh 2022-yilning aprel oyiga qadar faol boʻlmagan deb hisoblansa-da, 2022-yil sentyabr oyida xuddi shunday hujum vektori [[Uber]] va [[Rockstar Games]] kabi turli yirik kompaniyalarga qarshi maʼlumotlarning bir qator buzilishi ortidan qayta koʻrinish bergan hamda keyinchalik London shahri politsiyasi tomonidan hibsga olingan.

== Hujumlari ==

=== Samsung (2022) ===
'''2022-yil 4-martida''': Lapsus$ 190 GB hajmdagi [[.torrent|torrent]] faylni [[Samsung]] telefon ishlab chiqaruvchisiga tegishli ichki maʼlumotlarga, shu jumladan [[Samsung Galaxy]] telefonlar liniyasiga manba kodi sifatida joylashtirgan. Kompaniya uch kundan keyin kiberhujum uyushtirilganini tasdiqlagan<ref name="TMInfo">{{cite web |title=Is Lapsus$ targeting Big Tech after Samsung breach? |url=https://techmonitor.ai/technology/cybersecurity/is-lapsus-targeting-big-tech-after-samsung-and-nvidia-data-breaches |last=Glover |first=Claudia |website=Tech Monitor |access-date=14 March 2022 |date=7 March 2022}}</ref>.

=== Mercado Libre (2022) ===
'''2022-yil 8-martida''': Argentinaning [[Mercado Libre]] elektron tijorat kompaniyasi Lapsus$ guruhi 300 000 mijozning foydalanuvchi maʼlumotlariga ega chiqqanini tasdiqlaydi. Guruh, shuningdek, Mercado Librega tegishli 24 000 ta kiberomborga kirish huquqiga ega ekanligini daʼvo qilgan<ref name="MercadoBleep">{{Veb manbasi |sarlavha=E-commerce giant Mercado Libre confirms source code data breach |url=https://www.bleepingcomputer.com/news/security/e-commerce-giant-mercado-libre-confirms-source-code-data-breach/ |ish=BleepingComputer |qaralgan sana=23 March 2022 |til=en-us |ism=Ax |muallif=Sharma}}</ref>.

=== Ubisoft (2022) ===
'''2022-yil 10-martida''': [[Ubisoft]] videooʻyinlar kompaniyasi [[kiberhujum]]ga duch kelganini tasdiqlaydi. Biroq, Lapsus$ kompaniya foydalanuvchi maʼlumotlariga kirish imkoniyatini topolmagan<ref name="UbiVerge">{{cite web |last1=Peters |first1=Jay |title=Ubisoft says it experienced a 'cyber security incident', and the purported Nvidia hackers are taking credit |url=https://www.theverge.com/2022/3/11/22972768/ubisoft-cyber-security-incident-hack |website=The Verge |access-date=14 March 2022 |language=en |date=11 March 2022}}</ref>.

=== T-Mobile (2022) ===
'''2022-yil 17-martida''': Lapsus$ [[T-Mobile xalqaro kompaniyasi|T-Mobile]] telekommunikatsiya kompaniyasidagi xodim hisobiga kirish huquqini qoʻlga kiritgan. „White“ taxallusidagi guruhning mashhur aʼzosi [[Federal tekshirishlar byurosi|Federal qidiruv byurosi]] va [[AQSH mudofaa vazirligi|AQSh Mudofaa vazirligining]] T-Mobile hisoblariga kirishga muvaffaqiyatsiz urinish qayd etishgan. Biroq, Lapsus$ T-Mobile-ga tegishli manba kodlari bazalarini olishga muvaffaq boʻlgan<ref>{{Veb manbasi |sarlavha=Leaked Chats Show LAPSUS$ Stole T-Mobile Source Code |url=https://krebsonsecurity.com/2022/04/leaked-chats-show-lapsus-stole-t-mobile-source-code/ |qaralgan sana=22 April 2022 |til=en-US |ism=Brian |muallif=Krebs |sana=22 April 2022 |ish=Krebs on Security}}</ref>.

=== Microsoft (2022) ===
'''2022-yil 20-martida''': Lapsus$ oʻzining [[Telegram]] kanalida [[Microsoft]] kompaniyasining [[Microsoft Azure|Azure]] [[DevOps]] serverining skrinshotini joylashtirdi. Ertasi kuni guruh [[Microsoft Bing|Bing]] qidiruv tizimi uchun manba kodining 90%ini oʻz ichiga olgan 37 GBlik zip faylni sizdiradi<ref name="Ms37Bleep">{{Veb manbasi |sarlavha=Lapsus$ hackers leak 37GB of Microsoft's alleged source code |url=https://www.bleepingcomputer.com/news/microsoft/lapsus-hackers-leak-37gb-of-microsofts-alleged-source-code/ |ish=BleepingComputer |qaralgan sana=23 March 2022 |til=en-us |ism=Lawrence |muallif=Abrams}}</ref><ref name="OctaMsWired">{{Jurnal manbasi |last=Newman |first=Lily Hay |date=22 March 2022 |title='This Is Really, Really Bad': Lapsus$ Gang Claims Okta Hack |url=https://www.wired.com/story/okta-hack-microsoft-bing-code-leak-lapsus/ |magazine=Wired |access-date=23 March 2022}}</ref>.

=== Globant (2022) ===
'''2022-yil 30-martida''': [[Lyuksemburg|Lyuksemburgda]] joylashgan [[Globant]] IT-kompaniyasi oʻz tarmogʻi buzilganligini tasdiqlagan<ref>{{Veb manbasi |muallif=Goodin |ism=Dan |sarlavha=IT giant Globant discloses hack after Lapsus$ leaks 70GB of stolen data |url=https://arstechnica.com/information-technology/2022/03/it-giant-globant-discloses-hack-after-lapsus-leaks-70gb-of-stolen-data/ |ish=Ars Technica |qaralgan sana=31 March 2022 |til=en-us |sana=30 March 2022}}</ref>.

=== Uber (2022) ===
'''2022-yil 15-sentyabrida''': Lapsus$ning so‘nggi hujumidan deyarli olti oy o‘tgach, [[Uber]] xizmat ko‘rsatish kompaniyasi sifatida mobillik buzilganligini eʼlon qilingan<ref>{{Veb manbasi |muallif=Bajak |ism=Frank |sarlavha=Serious breach at Uber spotlights hacker social deception |ish=AP NEWS |qaralgan sana=17 September 2022 |sana=16 September 2022 |url=https://apnews.com/article/technology-social-media-hacking-73a37d3f1e67ec5832ccd10a8e02c7e6}} </ref>.

=== Rockstar Games (2022) ===
'''2022-yil 18-sentyabrida''': ''GTAForumsda'' ''[[untitled Grand Theft Auto game]]'' bilan aloqador 90 ga yaqin videolar paydo bo‘lgan<ref name="PCMag Uber">{{Veb manbasi |url=https://www.pcmag.com/news/uber-blames-recent-breach-on-lapsus-hacking-group |sarlavha=Uber Blames Recent Breach on LAPSUS$ Hacking Group |muallif=Kan |ism=Michael |ish=[[PCMag]] |nashriyot=[[Ziff Davis]] |sana=20 September 2022 |qaralgan sana=19 September 2022 |arxivurl=https://web.archive.org/web/20220919235520/https://www.pcmag.com/news/uber-blames-recent-breach-on-lapsus-hacking-group |arxivsana=19 September 2022}}</ref>. Bu ishga aloqador xakerning Lapsus$ kompaniyasi bilan aloqasi borligi taxmin qilingan<ref name="VGC Uber">{{Veb manbasi |url=https://www.videogameschronicle.com/news/uber-in-contact-with-the-fbi-over-potential-gta-6-hacker/ |sarlavha=Uber 'in contact with the FBI' over potential GTA 6 hacker |muallif=Robinson |ism=Andy |ish=[[Video Games Chronicle]] |nashriyot=[[Gamer Network]] |sana=19 September 2022 |qaralgan sana=20 September 2022 |arxivurl=https://web.archive.org/web/20220919235513/https://www.videogameschronicle.com/news/uber-in-contact-with-the-fbi-over-potential-gta-6-hacker/ |arxivsana=19 September 2022}}</ref>.

== Yana qarang ==
* [[ShinyHunters]]
== Manbalar ==
{{manbalar}}
== Havolalar ==
* [https://krebsonsecurity.com/tag/dev-0537/ DEV-0537]
[[Turkum:Xaker guruhlar]]