Intel hacked, first wave of stolen chip data released in 20GB dump

guest · Aug 6, 2020

Intel hacked, first wave of stolen chip data released in 20GB dump
August 6, 2020
https://appleinsider.com/articles/2...ave-of-stolen-chip-data-released-in-20gb-dump

A hacker has released 20GB of confidential chip engineering data stolen from Intel, with the data made available potentially leading to new zero-day threats for users across multiple platforms.

The hacker linked to a post on secret messaging platform, Telegram, detailing the contents of the leak and a Mega file attached at the bottom. While the contents are harmless on their own, they contain BIOS information and source code of proprietary Intel technology that could be used in building malware.
Click to expand...

Billing it as "Intel exconfidential Lake," the hacker claims the data has not been published anywhere and much of the information is under strict NDA. The data was allegedly acquired by an anonymous source who breached Intel earlier in 2020.

BIOS code for Kabylake and other processors could mean trouble for those users if hackers find ways to manipulate the code and get it installed on target computers.
Password protected documents seem to be lacking any security too, as they have the password "intel123" or "Intel123," which are too easily guessed for what are considered "highly confidential documents."
Click to expand...

These leaked documents are harmless on their own. The files are out there though, and bad actors will definitely be scraping through to find any useful vulnerability to attack.
For now, there is no evidence of any exploits actively in the wild as a result of the database.
Click to expand...

guest · Aug 6, 2020

Intel investigating breach after 20GB of internal documents leak online
Leak confirmed to be authentic. Many files are marked "confidential" or "restricted secret."
August 6, 2020
https://www.zdnet.com/article/intel...after-20gb-of-internal-documents-leak-online/

US chipmaker Intel is investigating a security breach after earlier today 20 GB of internal documents, with some marked "confidential" or "restricted secret," were uploaded online on file-sharing site MEGA.

The data was published by Till Kottmann, a Swiss software engineer, who said he received the files from an anonymous hacker who claimed to have breached Intel earlier this year.
The Swiss engineer said today's leak represents the first part of a multi-part series of Intel-related leaks.

ZDNet reviewed the content of today's files with security researchers who have previously analyzed Intel CPUs in past work, who deemed the leak authentic but didn't want to be named in this article due to ethical concerns of reviewing confidential data, and because of their ongoing relations with Intel.
Click to expand...

In an emailed statement sent after this article's publication, Intel denied getting "hacked," disputting Kottmann's claim.
The company suggested that an individual with access to its Resource and Design Center might have downloaded the confidential data without authorization and shared it with the Swiss researcher.
The company's full statement is below: [...]
Click to expand...

guest · Aug 10, 2020

Whatever the cause, Intel leak still stings
August 10, 2020
https://www.scmagazine.com/home/sec...h/whatever-the-cause-intel-leak-still-stings/

Depending on whose version of the story is correct, a 20 GB data leak affecting Intel presents an important lesson on either the perils of default credentials and insecure server misconfigurations, or the risks of sharing proprietary secrets with third-party business partners and customers.

Software engineer Tillie Kottmann, whose Twitter account looks to have been suspended, last week tweeted that an anonymous hacker shared with him a spate of internal Intel documents – the first of might be a series of leaks. Kottmann uploaded these confidential assets – including source code, product guides and manuals, technical specs, development and debugging tools and more – online via the file-sharing site MEGA and dubbed the leak “exconfidential Lake.”
Click to expand...

Regardless of the circumstances, there are key takeaways from the incident. First and foremost, the unauthorized disclosure of source code and other sensitive intellectual property could potentially be a boon for those seeking to steal corporate secrets.

“Intel’s technology is almost ubiquitous, and the leaked device designs and firmware source code can put businesses and individuals at risk,” said Ilia Sotnikov, VP of product management at Netwrix
Kron said the incident serves to “underline the security concerns around intellectual property when working with business partners both up and down the supply chain.
Click to expand...

“The fact that guessing a single [username] gave hackers access to the root folder and source code from so many different projects is astonishing. This was another data breach that was caused by poor data access policies.”
Moreover, said Sotnikov, “The fact that hackers were able to access a server using default credentials indicates that cybersecurity had lower priority compared to ease of use. [...]”
Click to expand...

Log in or Sign up

Intel hacked, first wave of stolen chip data released in 20GB dump

guest Guest

guest Guest

guest Guest

Log in or Sign up

Intel hacked, first wave of stolen chip data released in 20GB dump

guest Guest

guest Guest

guest Guest

Useful Searches