• Skip to main content
  • Skip to secondary menu
  • Skip to primary sidebar
  • Skip to footer
  • Our Services
  • Contact Us
  • Newsletter
  • Top Nav Social Icons

Mobile ID World

Mobile ID World

Identification Revolution

  • Mobile ID
    • What Is Mobile ID?
    • Identity Associations
    • Premier Partners
    • FAQ
  • News
  • Solutions
    • Behavioral
    • Facial Recognition
    • Fingerprint Biometrics
    • Iris Biometrics
    • Second Factor
    • Smart Cards
    • Smartphones
    • Vital
    • Voice
    • Wearable Tech
    • Other
  • Applications
    • Access Control
    • Cloud Technology
    • Commerce
    • Enterprise
    • Healthcare
    • Identification
    • Internet of Things
    • Law Enforcement
    • Strong Online Authentication
  • Exclusive
    • Interviews
    • Featured Articles
    • Podcasts
  • Companies
  • Events

Biometric Algorithms, TrustZone Code Among Samsung Data Claimed By Hacker Group

March 7, 2022

Samsung Electronics is scrambling to deal with a potentially devastating security breach. The hacking and extortion group Lapsus$ is claiming credit for the incident, and has already leaked nearly 190GB worth of Samsung data via torrent.

Biometric Algorithms, TrustZone Code Among Samsung Data Claimed By Hacker Group

While the full scope of the problem is not yet clear, Samsung has acknowledged that a breach occurred, and that some source code for its flagship Galaxy smartphones was exposed during the attack. That could be devastating for the technology giant, especially if Lapsus$’ own claims about the event prove accurate. In a preview, the group wrote that the leaked files include a wealth of confidential Samsung source code, including the bootloader source code for recent Samsung devices, and all of the algorithms for biometric device unlocking.

The news for Samsung only gets worse from there. Lapsus$ claims to have obtained the source code for every single Trusted Applet in Samsung’s TrustZone environment, which provides encryption and cryptography for highly sensitive operations. Other information potentially captured in the breach is Samsung’s activation server source code, and its API and services source code for authorizing Samsung accounts. Some confidential Qualcomm source code also may have been scooped up in the attack (the Galaxy S21 smartphone features Qualcomm’s second generation 3D sonic in-display fingerprint sensor).

If true, the information leaked in the Lapsus$ files could cut right to the core of the entire Galaxy mobile platform. Repairing the damage done to its security foundation would be difficult and expensive, and Samsung would still suffer a severe reputational hit with consumers all over the world.

Samsung, meanwhile, is not Lapsus$’ only target in recent months. The group is threatening to release NVIDIA source code unless the company gets rid of cryptocurrency mining restrictions. It is not yet clear if Lapsus$ made a similar extortion threat to Samsung before moving forward with the file leak.

Sources: Bleeping Computer, The Bharat Express News

Filed Under: Carousel, Industry News Tagged With: Biometric, biometric algorithms, biometrics, encryption, Fingerprint biometrics, fingerprint recognition, hack attacks, mobile biometrics, Samsung, security breaches

Related News & Articles

African Identity Startup Secures $7 Million in Series A Funding

OneLogin Launches New Behavioral Risk Assessment Platform

Flagship OPPO Phone Features Goodix In-Display Sensor

Primary Sidebar

Register For the Next Virtual Identity Summit

Register now!

Tweets

Sponsored Links

facetec logo

FaceTec’s patented, industry-leading 3D Face Authentication software anchors digital identity, creating a chain of trust from user onboarding to ongoing authentication on all modern smart devices and webcams. FaceTec’s 3D FaceMaps™ make trusted, remote identity verification finally possible. As the only technology backed by a persistent spoof bounty program and NIST/iBeta Certified Liveness Detection, FaceTec is the global standard for Liveness and 3D Face Matching with millions of users on six continents in financial services, border security, transportation, blockchain, e-voting, social networks, online dating and more. www.facetec.com

FACEPHI is a global leader in Facial Recognition technology and in Mobile Biometrics technologies. With a strong concentration in the financial sector, FacePhi’s product is rapidly becoming a service used by banks all over the world. Its implementation doesn’t just save money, it is also a way to attract clients and build loyalty, while increasing the security of transactions for both the customer and the business. To learn more about FacePhi, visit https://www.facephi.com/en/

Recent Posts

  • Selfie IDV Innovator Finds Escalating Demand in Q4
  • Another e-Betting Platform Leverages Biometric KYC, Care of Jumio
  • Thai Authorities Approve Mobile ID for Airport Boarding
  • New Yoti Solution Ties Biometrics to e-Signatures
  • Kenya’s New President Pushes for Digital ID By Year’s End

Footer

  • About Us
  • Company Directory
  • Advertise With Us
  • Contact Us
  • Privacy Policy
  • Terms of Use
  • Archives
  • CCPA: Do not sell my personal info.

Follow Us

Copyright © 2023 MobileIDWorld