{"id":15638,"date":"2022-03-23T15:43:04","date_gmt":"2022-03-23T15:43:04","guid":{"rendered":"https:\/\/tahrir2day.com\/news\/2022\/03\/23\/okta-says-screenshots-from-january-hack-could-impact-366-customers\/"},"modified":"2022-03-23T15:43:04","modified_gmt":"2022-03-23T15:43:04","slug":"okta-says-screenshots-from-january-hack-could-impact-366-customers","status":"publish","type":"post","link":"https:\/\/tahrir2day.com\/news\/2022\/03\/23\/okta-says-screenshots-from-january-hack-could-impact-366-customers\/","title":{"rendered":"Okta says screenshots from January hack could impact 366 customers"},"content":{"rendered":"
\n

Okta, an online identity authentication service used by thousands of U.S. companies to protect their computer networks, said an alleged breach of their systems is linked to a previous incident this year. There are no indications of a current threat to Okta as a result of this event, the company told CBS MoneyWatch.<\/p>\n

Okta’s comment comes after a group called Lapsus $ posted screenshots of what they said was the company’s internal environment through the Telegram messaging service. They added: “For a service that drives authentication systems to many of the big corporations (and approved by FEDRAMP), I think these security measures are pretty poor.” FedRAMP stands for the Federal Risk Management and Authorization Program, which oversees the use of cloud-based programs for federal agencies. <\/p>\n

In a Tuesday blog post from Okta’s security chief, the company said it determined that the screenshots came from a hacker who gained remote access to a support engineer’s computer. The attacker “never had access to the Okta service by taking into account,” but was able to take screenshots through hacking, security chief David Bradbury said. <\/p>\n

Bradbury said the maximum potential impact is on about 366 customers. <\/p>\n

He added: “Sharing these screenshots is embarrassing to me and the whole Okta team.”<\/p>\n

Hacking into Okta could pose a risk to corporations and workers, as the service is used by more than 15,000 organizations. According to security firm Check Point Software, Lapsus $ is a cybercrime group based in Brazil that has bragged about breaking into companies such as Nvidia, Samsung and Ubisoft. It is unclear how Lapsus $ hacked these businesses, the company added.<\/p>\n

“If true, Okta’s failure may explain how Lapsus $ has been able to achieve some of its recent chain hits,” Check Point said in a blog post. “Thousands of companies use Okta to secure and manage their identities.”<\/p>\n

He added: “Through private keys recovered within Okta, the cyber gang can gain access to corporate networks and applications. Therefore, a breach of Okta could have potentially disastrous consequences.”<\/p>\n

“Contained” threat<\/h2>\n

Okta said the screenshots are linked to a January attempt to hack an account of a third-party customer service engineer working for a subcontractor. <\/p>\n

\u201cThe matter was investigated and contained,\u201d Okta said. “According to our research so far, there is no evidence of ongoing malicious activity beyond the activity detected in January.”<\/p>\n

Lapsus $ also claimed to have hacked Microsoft and released some source code for Bing, Bing Maps and Cortana, which is a virtual assistant developed by the software giant.<\/p>\n

Shares of Okta fell 8.5% on Wednesday.<\/p>\n

<\/p>\n