Nokia hacked: Serbian cybercriminal claims to have the company’s source code

Nokia has confirmed unauthorized access through one of its third-party contractors, resulting in the theft of highly important data. The attack was attributed by the firm itself to a “threat actor” who managed to compromise the server of an external provider, which opens the possibility that key company data has been stolen and put up for sale.

The attack has been claimed by IntelBroker, a well-known Serbian hacker who, according to reports from specialized media such as HackRead and BleepingComputer, He would be selling Nokia source code for $20,000 on dark web forums. The cybercriminal claims that he accessed a SonarQube server with default credentials from one of Nokia’s providers, downloading critical information and confidential files from there.

IntelBroker himself, who has been active in the world of cybercrime in recent years, provided details to BleepingComputer about how was able to obtain credentials such as SSH keys, SMTP accounts and RSA keys, information that could be used in future attacks or to compromise systems. Nokia has stated, however, that, so far, its customers’ data remains secure.

This Serbian hacker is not unknown in the field of cybersecurity; It is linked to previous leaks that affected large technology firms such as Hewlett Packard, Apple y AMD. In addition, sensitive attacks are attributed to him, such as the one carried out against DC Health Linkwhere personal data of officials of the United States House of Representativesand a security breach in the Europol Expert Platform (EPE), a network for exchanging information between police agencies.

Nokia is currently investigating the scope of this attack and the veracity of the files that IntelBroker has made available for sale. The company assures that it is evaluating the situation to understand the possible impact on its infrastructure and protect its sensitive information in the future.