IntelBroker says it has personal GitHub repositories, Docker builds, supply code and extra
Professional
Hewlett Packard Enterprise stated it’s investigating claims a menace group gained entry to a trove of delicate firm information.
The menace group, IntelBroker, posted a declare on BreachForums that it had entry to a big trove of HPE information, in keeping with researchers from Arctic Wolf.
The allegedly stolen information contains personal GitHub repositories, Docker builds, supply code and different info, in keeping with the posting.
Upon studying of the declare final Thursday, the corporate instantly activated cyber response protocols, disabled associated credentials and launched an investigation to find out whether or not the claims had been legitimate, a spokesperson stated Tuesday by way of e-mail.
“There is no such thing as a operational affect to our enterprise at the moment, nor proof that buyer info is concerned,” the spokesperson stated.
IntelBroker first got here to prominence in 2022 and has been linked to a variety of high-profile assaults.
The group beforehand exploited belongings in public-facing functions to realize preliminary entry, Arctic Wolf researchers stated. The group has additionally allegedly bought entry to compromised programs.
Researchers stated the group has a historical past of inflating claims associated to previous menace exercise.
“They’ve been identified to magnify the importance of information uncovered in previous breaches, so it’s prudent to stay skeptical of sweeping claims made on their half,” Arctic Wolf researchers stated by a spokesperson.
HPE has been concerned in a variety of high-profile cyberattacks in recent times. A 12 months in the past, the corporate disclosed a monthslong intrusion by Midnight Blizzard, which impacted a restricted quantity of the corporate’s SharePoint and mailbox environments.
A 2021 assault impacted a restricted variety of information repositories within the firm’s Aruba Central cloud setting.
Cybersecurity Dive