Cyber Security News

Threat Actor IntelBroker Claims Leak of Nokia’s Source Code

The threat actor known as IntelBroker, in collaboration with EnergyWeaponUser, has claimed responsibility for a significant data breach involving Nokia’s proprietary source code.

The news, which has sent ripples through the tech industry, was shared on social media, highlighting the potential consequences for Nokia and its stakeholders. 

The breach reportedly involves a substantial collection of Nokia’s source code, allegedly obtained through a third-party contractor associated with Nokia’s internal tool development.

Leak of Nokia’s Source Code

The compromised data includes sensitive information such as SSH keys, RSA keys, Bitbucket credentials, SMTP accounts, webhooks, and hardcoded credentials. A file tree has been provided as evidence to substantiate these claims.

Build an in-house SOC or outsource SOC-as-a-Service -> Calculate Costs

HackManac announced the extent of the data allegedly exfiltrated in a post on X.

The threat actors claim to be selling this data, raising concerns about the potential misuse of Nokia’s intellectual property and the broader implications for cybersecurity within the telecommunications industry. 

Industry experts have expressed alarm over the breach, noting that the exposure of such critical information could lead to significant security vulnerabilities for Nokia and its partners and customers.

The availability of SSH and RSA keys, in particular, poses a serious threat, as these could potentially be used to gain unauthorized access to secure systems. 

Nokia has yet to issue an official statement regarding the breach, but cybersecurity analysts urge companies to review their security protocols, especially those related to third-party contractors.

The incident underscores the importance of implementing robust security measures and regularly auditing access controls to safeguard sensitive data. 

As investigations continue, the tech community watches closely to see how Nokia will respond.

This incident highlights the evolving landscape of cybercrime and the sophisticated tactics employed by threat actors to exploit vulnerabilities in corporate networks.

Run private, Real-time Malware Analysis in both Windows & Linux VMs. Get a 14-day free trial with ANY.RUN!

Divya

Divya is a Senior Journalist at GBhackers covering Cyber Attacks, Threats, Breaches, Vulnerabilities and other happenings in the cyber world.

Recent Posts

Microsoft Teams File Sharing Unavailable Due to Unexpected Outage

Microsoft Teams users across the globe are experiencing significant disruptions in file-sharing capabilities due to…

5 hours ago

Cloud Misconfigurations – A Leading Cause of Data Breaches

Cloud computing has transformed the way organizations operate, offering unprecedented scalability, flexibility, and cost savings.…

6 hours ago

Security Awareness Metrics That Matter to the CISO

Security awareness has become a critical component of organizational defense strategies, particularly as companies adopt…

6 hours ago

New ‘Waiting Thread Hijacking’ Malware Technique Evades Modern Security Measures

Security researchers have unveiled a new malware process injection technique dubbed "Waiting Thread Hijacking" (WTH),…

6 hours ago

From ISO to NIS2 – Mapping Compliance Requirements Globally

The global regulatory landscape for cybersecurity is undergoing a seismic shift, with the European Union’s…

6 hours ago

PasivRobber Malware Emerges, Targeting macOS to Steal Data From Systems and Apps

A sophisticated new malware suite targeting macOS, dubbed "PasivRobber," has been discovered by security researchers.…

6 hours ago