The threat actor known as IntelBroker, in collaboration with EnergyWeaponUser, has claimed responsibility for a significant data breach involving Nokia’s proprietary source code.
The news, which has sent ripples through the tech industry, was shared on social media, highlighting the potential consequences for Nokia and its stakeholders.
The breach reportedly involves a substantial collection of Nokia’s source code, allegedly obtained through a third-party contractor associated with Nokia’s internal tool development.
Leak of Nokia’s Source Code
The compromised data includes sensitive information such as SSH keys, RSA keys, Bitbucket credentials, SMTP accounts, webhooks, and hardcoded credentials. A file tree has been provided as evidence to substantiate these claims.
Build an in-house SOC or outsource SOC-as-a-Service -> Calculate Costs
HackManac announced the extent of the data allegedly exfiltrated in a post on X.
The threat actors claim to be selling this data, raising concerns about the potential misuse of Nokia’s intellectual property and the broader implications for cybersecurity within the telecommunications industry.
Industry experts have expressed alarm over the breach, noting that the exposure of such critical information could lead to significant security vulnerabilities for Nokia and its partners and customers.
The availability of SSH and RSA keys, in particular, poses a serious threat, as these could potentially be used to gain unauthorized access to secure systems.
Nokia has yet to issue an official statement regarding the breach, but cybersecurity analysts urge companies to review their security protocols, especially those related to third-party contractors.
The incident underscores the importance of implementing robust security measures and regularly auditing access controls to safeguard sensitive data.
As investigations continue, the tech community watches closely to see how Nokia will respond.
This incident highlights the evolving landscape of cybercrime and the sophisticated tactics employed by threat actors to exploit vulnerabilities in corporate networks.
Run private, Real-time Malware Analysis in both Windows & Linux VMs. Get a 14-day free trial with ANY.RUN!
