{"id":21562,"date":"2022-03-24T21:15:08","date_gmt":"2022-03-25T01:15:08","guid":{"rendered":"http:\/\/worldjusticenews.com\/news\/?p=21562"},"modified":"2022-03-24T21:15:08","modified_gmt":"2022-03-25T01:15:08","slug":"lapsus-oxford-teen-accused-of-being-multi-millionaire-cyber-criminal","status":"publish","type":"post","link":"https:\/\/worldjusticenews.com\/news\/2022\/03\/24\/lapsus-oxford-teen-accused-of-being-multi-millionaire-cyber-criminal\/","title":{"rendered":"Lapsus$: Oxford teen accused of being multi-millionaire cyber-criminal"},"content":{"rendered":"<div class=\"ssrcss-uf6wea-RichTextComponentWrapper e1xue1i86\" data-component=\"text-block\">\n<div class=\"ssrcss-7uxr49-RichTextContainer e5tfeyi1\">\n<p class=\"ssrcss-1q0x1qg-Paragraph eq5iqo00\"><b class=\"ssrcss-hmf8ql-BoldText e5tfeyi3\">A 16-year-old from Oxford has been accused of being one of the leaders of cyber-crime gang Lapsus$.<\/b><\/p>\n<\/div>\n<\/div>\n<div class=\"ssrcss-uf6wea-RichTextComponentWrapper e1xue1i86\" data-component=\"text-block\">\n<div class=\"ssrcss-7uxr49-RichTextContainer e5tfeyi1\">\n<p class=\"ssrcss-1q0x1qg-Paragraph eq5iqo00\">The teenager, who is alleged to have amassed a $14m (\u00a310.6m) fortune from hacking, has been named by rival hackers and researchers.<\/p>\n<\/div>\n<\/div>\n<div class=\"ssrcss-uf6wea-RichTextComponentWrapper e1xue1i86\" data-component=\"text-block\">\n<div class=\"ssrcss-7uxr49-RichTextContainer e5tfeyi1\">\n<p class=\"ssrcss-1q0x1qg-Paragraph eq5iqo00\">City of London Police say they have arrested seven teenagers in relation to the gang but will not say if he is one.<\/p>\n<\/div>\n<\/div>\n<div class=\"ssrcss-uf6wea-RichTextComponentWrapper e1xue1i86\" data-component=\"text-block\">\n<div class=\"ssrcss-7uxr49-RichTextContainer e5tfeyi1\">\n<p class=\"ssrcss-1q0x1qg-Paragraph eq5iqo00\">The boy&#8217;s father told the BBC his family was concerned and was trying to keep him away from his computers.<\/p>\n<\/div>\n<\/div>\n<div class=\"ssrcss-uf6wea-RichTextComponentWrapper e1xue1i86\" data-component=\"text-block\">\n<div class=\"ssrcss-7uxr49-RichTextContainer e5tfeyi1\">\n<p class=\"ssrcss-1q0x1qg-Paragraph eq5iqo00\">Under his online moniker &#8220;White&#8221; or &#8220;Breachbase&#8221; the teenager, who has autism, is said to be behind the prolific Lapsus$ hacker crew, which is believed to be based in South America.<\/p>\n<\/div>\n<\/div>\n<div class=\"ssrcss-uf6wea-RichTextComponentWrapper e1xue1i86\" data-component=\"text-block\">\n<div class=\"ssrcss-7uxr49-RichTextContainer e5tfeyi1\">\n<p class=\"ssrcss-1q0x1qg-Paragraph eq5iqo00\">Lapsus$ is relatively new but has become one of the most talked about and feared hacker cyber-crime gangs, after successfully breaching major firms like Microsoft and then bragging about it online.<\/p>\n<\/div>\n<\/div>\n<div class=\"ssrcss-uf6wea-RichTextComponentWrapper e1xue1i86\" data-component=\"text-block\">\n<div class=\"ssrcss-7uxr49-RichTextContainer e5tfeyi1\">\n<p class=\"ssrcss-1q0x1qg-Paragraph eq5iqo00\">The teenager, who can&#8217;t be named for legal reasons, attends a special educational school in Oxford.<\/p>\n<\/div>\n<\/div>\n<div class=\"ssrcss-uf6wea-RichTextComponentWrapper e1xue1i86\" data-component=\"text-block\">\n<div class=\"ssrcss-7uxr49-RichTextContainer e5tfeyi1\">\n<p class=\"ssrcss-1q0x1qg-Paragraph eq5iqo00\">City of London Police said: &#8220;Seven people between the ages of 16 and 21 have been arrested in connection with an investigation into a hacking group. They have all been released under investigation. Our inquiries remain ongoing.&#8221;<\/p>\n<\/div>\n<\/div>\n<div class=\"ssrcss-dm4ypg-ComponentWrapper-HeadlineComponentWrapper e1xue1i89\" data-component=\"subheadline-block\">\n<h2 id=\"Playing-online-games\" class=\"ssrcss-y2fd7s-StyledHeading e1fj1fc10\" tabindex=\"-1\"><span role=\"text\">Playing online games<\/span><\/h2>\n<\/div>\n<div class=\"ssrcss-uf6wea-RichTextComponentWrapper e1xue1i86\" data-component=\"text-block\">\n<div class=\"ssrcss-7uxr49-RichTextContainer e5tfeyi1\">\n<p class=\"ssrcss-1q0x1qg-Paragraph eq5iqo00\">The boy&#8217;s father told the BBC: &#8220;I had never heard about any of this until recently. He&#8217;s never talked about any hacking, but he is very good on computers and spends a lot of time on the computer. I always thought he was playing games.&#8221;<\/p>\n<figure id=\"attachment_19363\" aria-describedby=\"caption-attachment-19363\" style=\"width: 525px\" class=\"wp-caption aligncenter\"><a href=\"http:\/\/worldjusticenews.com\/news\/wp-content\/uploads\/2021\/07\/Microsoft.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-19363\" src=\"http:\/\/worldjusticenews.com\/news\/wp-content\/uploads\/2021\/07\/Microsoft.jpg\" alt=\"Microsoft\" width=\"525\" height=\"296\" srcset=\"https:\/\/worldjusticenews.com\/news\/wp-content\/uploads\/2021\/07\/Microsoft.jpg 525w, https:\/\/worldjusticenews.com\/news\/wp-content\/uploads\/2021\/07\/Microsoft-300x169.jpg 300w\" sizes=\"auto, (max-width: 525px) 100vw, 525px\" \/><\/a><figcaption id=\"caption-attachment-19363\" class=\"wp-caption-text\">Microsoft is one of the victims of the Lapsus$ hacking group<\/figcaption><\/figure>\n<\/div>\n<\/div>\n<p>&nbsp;<\/p>\n<div class=\"ssrcss-uf6wea-RichTextComponentWrapper e1xue1i86\" data-component=\"text-block\">\n<div class=\"ssrcss-7uxr49-RichTextContainer e5tfeyi1\">\n<p class=\"ssrcss-1q0x1qg-Paragraph eq5iqo00\">&#8220;We&#8217;re going to try to stop him from going on computers.&#8221;<\/p>\n<\/div>\n<\/div>\n<div class=\"ssrcss-uf6wea-RichTextComponentWrapper e1xue1i86\" data-component=\"text-block\">\n<div class=\"ssrcss-7uxr49-RichTextContainer e5tfeyi1\">\n<p class=\"ssrcss-1q0x1qg-Paragraph eq5iqo00\">The BBC has also spoken to the boy&#8217;s mother, who did not want to comment.<\/p>\n<\/div>\n<\/div>\n<div class=\"ssrcss-dm4ypg-ComponentWrapper-HeadlineComponentWrapper e1xue1i89\" data-component=\"subheadline-block\">\n<h2 id=\"Doxxed-online\" class=\"ssrcss-y2fd7s-StyledHeading e1fj1fc10\" tabindex=\"-1\"><span role=\"text\">&#8216;Doxxed&#8217; online<\/span><\/h2>\n<\/div>\n<div class=\"ssrcss-uf6wea-RichTextComponentWrapper e1xue1i86\" data-component=\"text-block\">\n<div class=\"ssrcss-7uxr49-RichTextContainer e5tfeyi1\">\n<p class=\"ssrcss-1q0x1qg-Paragraph eq5iqo00\">&#8220;White&#8221; was outed &#8211; or &#8220;doxxed&#8221; &#8211; on a hacker website, after an apparent falling out with business partners.<\/p>\n<\/div>\n<\/div>\n<div class=\"ssrcss-uf6wea-RichTextComponentWrapper e1xue1i86\" data-component=\"text-block\">\n<div class=\"ssrcss-7uxr49-RichTextContainer e5tfeyi1\">\n<p class=\"ssrcss-1q0x1qg-Paragraph eq5iqo00\">The hackers revealed his name, address, and social media pictures.<\/p>\n<\/div>\n<\/div>\n<div class=\"ssrcss-uf6wea-RichTextComponentWrapper e1xue1i86\" data-component=\"text-block\">\n<div class=\"ssrcss-7uxr49-RichTextContainer e5tfeyi1\">\n<p class=\"ssrcss-1q0x1qg-Paragraph eq5iqo00\">They also posted a biography of his hacking career, saying: &#8220;After a few years his net worth accumulated to well over 300BTC [close to $14m]\u2026 [he is] now is affiliated with a wannabe ransomware group known as &#8216;Lapsus$&#8217;, who has been extorting &amp; &#8216;hacking&#8217; several organisations.&#8221;<\/p>\n<\/div>\n<\/div>\n<div class=\"ssrcss-uf6wea-RichTextComponentWrapper e1xue1i86\" data-component=\"text-block\">\n<div class=\"ssrcss-7uxr49-RichTextContainer e5tfeyi1\">\n<p class=\"ssrcss-1q0x1qg-Paragraph eq5iqo00\">As\u00a0<a class=\"ssrcss-1gfaiii-InlineLink e1no5rhv0\" href=\"https:\/\/www.bloomberg.com\/news\/articles\/2022-03-23\/teen-suspected-by-cyber-researchers-of-being-lapsus-mastermind?sref=ylv224K8\" target=\"_blank\" rel=\"noopener\">first reported by Bloomberg,<\/a>\u00a0cyber-security researchers have been tracking &#8220;White&#8221; for nearly a year and have linked him to Lapsus$ and other hacking incidents.<\/p>\n<\/div>\n<\/div>\n<div class=\"ssrcss-uf6wea-RichTextComponentWrapper e1xue1i86\" data-component=\"text-block\">\n<div class=\"ssrcss-7uxr49-RichTextContainer e5tfeyi1\">\n<p class=\"ssrcss-1q0x1qg-Paragraph eq5iqo00\">&#8220;We&#8217;ve had his name since the middle of last year and we identified him before the doxxing,&#8221; said Allison Nixon, chief research officer at cyber-security investigation company Unit 221B.<\/p>\n<\/div>\n<\/div>\n<div class=\"ssrcss-uf6wea-RichTextComponentWrapper e1xue1i86\" data-component=\"text-block\">\n<div class=\"ssrcss-7uxr49-RichTextContainer e5tfeyi1\">\n<p class=\"ssrcss-1q0x1qg-Paragraph eq5iqo00\">&#8220;Unit 221B working with [cyber-security company] Palo Alto after identifying the actor, watched him on his exploits throughout 2021, periodically sending law enforcement a heads-up about the latest crimes.&#8221;<\/p>\n<\/div>\n<\/div>\n<div class=\"ssrcss-uf6wea-RichTextComponentWrapper e1xue1i86\" data-component=\"text-block\">\n<div class=\"ssrcss-7uxr49-RichTextContainer e5tfeyi1\">\n<p class=\"ssrcss-1q0x1qg-Paragraph eq5iqo00\">Mrs Nixon says researchers tracked him through a trail of activity linked through a nearly unbroken stream of the boy&#8217;s online accounts.<\/p>\n<\/div>\n<\/div>\n<div class=\"ssrcss-uf6wea-RichTextComponentWrapper e1xue1i86\" data-component=\"text-block\">\n<div class=\"ssrcss-7uxr49-RichTextContainer e5tfeyi1\">\n<p class=\"ssrcss-1q0x1qg-Paragraph eq5iqo00\">&#8220;We did it by watching the post history of an account and seeing older posts provide contact information for the guy.&#8221;<\/p>\n<\/div>\n<\/div>\n<div class=\"ssrcss-uf6wea-RichTextComponentWrapper e1xue1i86\" data-component=\"text-block\">\n<div class=\"ssrcss-7uxr49-RichTextContainer e5tfeyi1\">\n<p class=\"ssrcss-1q0x1qg-Paragraph eq5iqo00\">Mrs Nixon says the trail was followed thanks to mistakes &#8220;White&#8221; made in failing to cover his tracks.<\/p>\n<\/div>\n<\/div>\n<div class=\"ssrcss-dm4ypg-ComponentWrapper-HeadlineComponentWrapper e1xue1i89\" data-component=\"subheadline-block\">\n<h2 id=\"Lapsus-crew-\" class=\"ssrcss-y2fd7s-StyledHeading e1fj1fc10\" tabindex=\"-1\"><span role=\"text\">Lapsus$ crew<\/span><\/h2>\n<\/div>\n<div class=\"ssrcss-uf6wea-RichTextComponentWrapper e1xue1i86\" data-component=\"text-block\">\n<div class=\"ssrcss-7uxr49-RichTextContainer e5tfeyi1\">\n<p class=\"ssrcss-1q0x1qg-Paragraph eq5iqo00\">The Lapsus$ cyber-extortion group has gained notoriety in a short space of time thanks to its high-profile targets and active presence on the messaging app Telegram. Its channel has grown to 47,000 subscribers.<\/p>\n<\/div>\n<\/div>\n<div class=\"ssrcss-uf6wea-RichTextComponentWrapper e1xue1i86\" data-component=\"text-block\">\n<div class=\"ssrcss-7uxr49-RichTextContainer e5tfeyi1\">\n<p class=\"ssrcss-1q0x1qg-Paragraph eq5iqo00\">The last message was posted on the channel on Wednesday, with the group saying: &#8220;A few of our members has a vacation until 30\/3\/2022. We might be quiet for some times. Thanks for understand us &#8211; we will try to leak stuff ASAP.&#8221;<\/p>\n<\/div>\n<\/div>\n<div class=\"ssrcss-18mjolk-ComponentWrapper e1xue1i810\" data-component=\"image-block\">\n<figure class=\"ssrcss-wpgbih-StyledFigure e34k3c23\">\n<div class=\"ssrcss-ab5fd8-StyledFigureContainer e34k3c21\"><span class=\"ssrcss-1hq4gmv-Placeholder e16icw910\"><img loading=\"lazy\" decoding=\"async\" class=\"ssrcss-1drmwog-Image ee0ct7c0\" src=\"https:\/\/ichef.bbci.co.uk\/news\/976\/cpsprodpb\/734D\/production\/_123871592_oktareutershi074802636.jpg\" srcset=\"https:\/\/ichef.bbci.co.uk\/news\/240\/cpsprodpb\/734D\/production\/_123871592_oktareutershi074802636.jpg 240w, https:\/\/ichef.bbci.co.uk\/news\/320\/cpsprodpb\/734D\/production\/_123871592_oktareutershi074802636.jpg 320w, https:\/\/ichef.bbci.co.uk\/news\/480\/cpsprodpb\/734D\/production\/_123871592_oktareutershi074802636.jpg 480w, https:\/\/ichef.bbci.co.uk\/news\/624\/cpsprodpb\/734D\/production\/_123871592_oktareutershi074802636.jpg 624w, https:\/\/ichef.bbci.co.uk\/news\/800\/cpsprodpb\/734D\/production\/_123871592_oktareutershi074802636.jpg 800w, https:\/\/ichef.bbci.co.uk\/news\/976\/cpsprodpb\/734D\/production\/_123871592_oktareutershi074802636.jpg 976w\" alt=\"Illustration of Okta's logo\" width=\"976\" height=\"549\" \/><\/span><\/div><figcaption class=\"ssrcss-name08-StyledFigureCaption e34k3c22\">\n<div class=\"ssrcss-y7krbn-Stack e1y4nx260\">Okta says hundreds of its customers were affected by the cyber-attack (Image: Reuters)<\/div>\n<\/figcaption><\/figure>\n<\/div>\n<div class=\"ssrcss-uf6wea-RichTextComponentWrapper e1xue1i86\" data-component=\"text-block\">\n<div class=\"ssrcss-7uxr49-RichTextContainer e5tfeyi1\">\n<p>&nbsp;<\/p>\n<p class=\"ssrcss-1q0x1qg-Paragraph eq5iqo00\">Chris Morgan, from cyber-security company Digital Shadows, says Lapsus$ has risen in prominence in recent months &#8220;after targeting several enterprise technology companies, breaching significant amounts of data and posting on to their dedicated Telegram data leak channel&#8221;.<\/p>\n<\/div>\n<\/div>\n<div class=\"ssrcss-uf6wea-RichTextComponentWrapper e1xue1i86\" data-component=\"text-block\">\n<div class=\"ssrcss-7uxr49-RichTextContainer e5tfeyi1\">\n<p class=\"ssrcss-1q0x1qg-Paragraph eq5iqo00\">&#8220;Little is known of the origins of the group, however, given that Lapsus$&#8217;s initial activity was directed towards several organisations in Brazil, some researchers have speculated that the group is based in South America,&#8221; Mr Morgan said.<\/p>\n<\/div>\n<\/div>\n<div class=\"ssrcss-uf6wea-RichTextComponentWrapper e1xue1i86\" data-component=\"text-block\">\n<div class=\"ssrcss-7uxr49-RichTextContainer e5tfeyi1\">\n<p class=\"ssrcss-1q0x1qg-Paragraph eq5iqo00\">In a Wednesday\u00a0<a class=\"ssrcss-1gfaiii-InlineLink e1no5rhv0\" href=\"https:\/\/www.microsoft.com\/security\/blog\/2022\/03\/22\/dev-0537-criminal-actor-targeting-organizations-for-data-exfiltration-and-destruction\/?s=08\" target=\"_blank\" rel=\"noopener\">blog post, Microsoft said<\/a>\u00a0Lapsus$ had gained limited access to its system.<\/p>\n<\/div>\n<\/div>\n<div class=\"ssrcss-uf6wea-RichTextComponentWrapper e1xue1i86\" data-component=\"text-block\">\n<div class=\"ssrcss-7uxr49-RichTextContainer e5tfeyi1\">\n<p class=\"ssrcss-1q0x1qg-Paragraph eq5iqo00\">Security company Okta\u00a0<a class=\"ssrcss-1gfaiii-InlineLink e1no5rhv0\" href=\"https:\/\/www.bbc.co.uk\/news\/technology-60849687\" target=\"_blank\" rel=\"noopener\">admitted that it too had been hacked<\/a>\u00a0by the group, with consequences for hundreds of its clients.<\/p>\n<p>Source: <a href=\"https:\/\/www.bbc.co.uk\/news\/technology-60864283\" target=\"_blank\" rel=\"noopener\">bbc.co.uk<\/a><\/p>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<div class=\"mh-excerpt\">A 16-year-old from Oxford has been accused of being one of the leaders of cyber-crime gang Lapsus$. The teenager, who is alleged to have amassed a $14m (\u00a310.6m) fortune from hacking, has been named by <a class=\"mh-excerpt-more\" href=\"https:\/\/worldjusticenews.com\/news\/2022\/03\/24\/lapsus-oxford-teen-accused-of-being-multi-millionaire-cyber-criminal\/\" title=\"Lapsus$: Oxford teen accused of being multi-millionaire cyber-criminal\">[&#8230;]<\/a><\/div>\n","protected":false},"author":1,"featured_media":21564,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"pmpro_default_level":"","footnotes":""},"categories":[2,4],"tags":[6124,7572,4835,8396,7120,2936,8395,4610,6270],"class_list":{"0":"post-21562","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-news","8":"category-uk","9":"tag-city-of-london-police","10":"tag-cyber-attacks","11":"tag-cyber-crime","12":"tag-cyber-extortion","13":"tag-cyber-security","14":"tag-hacking","15":"tag-lapsus","16":"tag-oxford","17":"tag-ransomware","18":"pmpro-has-access"},"_links":{"self":[{"href":"https:\/\/worldjusticenews.com\/news\/wp-json\/wp\/v2\/posts\/21562","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/worldjusticenews.com\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/worldjusticenews.com\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/worldjusticenews.com\/news\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/worldjusticenews.com\/news\/wp-json\/wp\/v2\/comments?post=21562"}],"version-history":[{"count":2,"href":"https:\/\/worldjusticenews.com\/news\/wp-json\/wp\/v2\/posts\/21562\/revisions"}],"predecessor-version":[{"id":21566,"href":"https:\/\/worldjusticenews.com\/news\/wp-json\/wp\/v2\/posts\/21562\/revisions\/21566"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/worldjusticenews.com\/news\/wp-json\/wp\/v2\/media\/21564"}],"wp:attachment":[{"href":"https:\/\/worldjusticenews.com\/news\/wp-json\/wp\/v2\/media?parent=21562"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/worldjusticenews.com\/news\/wp-json\/wp\/v2\/categories?post=21562"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/worldjusticenews.com\/news\/wp-json\/wp\/v2\/tags?post=21562"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}