Cyber Security News

Threat Actor IntelBroker Claims Leak of Nokia’s Source Code

The threat actor known as IntelBroker, in collaboration with EnergyWeaponUser, has claimed responsibility for a significant data breach involving Nokia’s proprietary source code.

The news, which has sent ripples through the tech industry, was shared on social media, highlighting the potential consequences for Nokia and its stakeholders. 

The breach reportedly involves a substantial collection of Nokia’s source code, allegedly obtained through a third-party contractor associated with Nokia’s internal tool development.

Leak of Nokia’s Source Code

The compromised data includes sensitive information such as SSH keys, RSA keys, Bitbucket credentials, SMTP accounts, webhooks, and hardcoded credentials. A file tree has been provided as evidence to substantiate these claims.

Build an in-house SOC or outsource SOC-as-a-Service -> Calculate Costs

HackManac announced the extent of the data allegedly exfiltrated in a post on X.

The threat actors claim to be selling this data, raising concerns about the potential misuse of Nokia’s intellectual property and the broader implications for cybersecurity within the telecommunications industry. 

Industry experts have expressed alarm over the breach, noting that the exposure of such critical information could lead to significant security vulnerabilities for Nokia and its partners and customers.

The availability of SSH and RSA keys, in particular, poses a serious threat, as these could potentially be used to gain unauthorized access to secure systems. 

Nokia has yet to issue an official statement regarding the breach, but cybersecurity analysts urge companies to review their security protocols, especially those related to third-party contractors.

The incident underscores the importance of implementing robust security measures and regularly auditing access controls to safeguard sensitive data. 

As investigations continue, the tech community watches closely to see how Nokia will respond.

This incident highlights the evolving landscape of cybercrime and the sophisticated tactics employed by threat actors to exploit vulnerabilities in corporate networks.

Run private, Real-time Malware Analysis in both Windows & Linux VMs. Get a 14-day free trial with ANY.RUN!

Divya

Divya is a Senior Journalist at GBhackers covering Cyber Attacks, Threats, Breaches, Vulnerabilities and other happenings in the cyber world.

Recent Posts

Attackers Exploit Microsoft Entra Billing Roles to Escalate Privileges in Organizational Environments

A startling discovery by BeyondTrust researchers has unveiled a critical vulnerability in Microsoft Entra ID…

19 hours ago

Threat Actors Exploit Google Apps Script to Host Phishing Sites

The Cofense Phishing Defense Center has uncovered a highly strategic phishing campaign that leverages Google…

20 hours ago

Dadsec Hacker Group Uses Tycoon2FA Infrastructure to Steal Office365 Credentials

Cybersecurity researchers from Trustwave’s Threat Intelligence Team have uncovered a large-scale phishing campaign orchestrated by…

20 hours ago

Beware: Weaponized AI Tool Installers Infect Devices with Ransomware

Cisco Talos has uncovered a series of malicious threats masquerading as legitimate AI tool installers,…

21 hours ago

Pure Crypter Uses Multiple Evasion Methods to Bypass Windows 11 24H2 Security Features

Pure Crypter, a well-known malware-as-a-service (MaaS) loader, has been recognized as a crucial tool for…

21 hours ago

Attackers Exploit Microsoft Entra Billing Roles to Escalate Privileges

A recent discovery by security researchers at BeyondTrust has revealed a critical, yet by-design, security…

21 hours ago