The City of London police announced that they have arrested a 17-year-old teen from Oxfordshire suspected of being involved in recent cyberattacks.
The department stated that the arrest was made as part of an investigation in partnership with the U.K. National Crime Agency’s cybercrime unit.
There are no details about the investigation, but the arrest is believed to be tied to the Lapsus$ hacking group, which is suspected to be behind recent cyberattacks on Uber, Rockstar Games, and 2K.
During last year’s attacks, the Lapsus$ hacking group was said to be led by a threat actor named ‘White’ or ‘BreachBase,’ who was doxed as allegedly a 16-year-old teen from the UK. This hacking group is responsible for several high-profile attacks, including Microsoft, Cisco, NVIDIA, Samsung, and Okta.
In April, the City of London Police arrested seven people aged 16 to 21, including the alleged 17-year-old ringleader. However, the UK soon released the two boys on bail as they were minors.
Last week, Uber disclosed they were responding to a cyberattack after a hacker, known as ‘TeaPots,’ gained access to their Slack server and began posting screenshots of their access to other internal services.
Three days later, the hacker calling themselves ‘teapotuberhacker’ began leaking previously unseen Grand Theft Auto 6 video footage and snippets of source code for GTA V and GTA VI on GTAforums.com.
The hacker claimed that they breached Rockstar Game’s Slack and Confluence servers to steal the data and also said they were behind the recent attack on Uber.
The owner of the Breached hacking forum, pompompurin, was the first to claim that White was behind the Rockstar Games and Uber attacks.
Soon after, Uber also attributed the attack to the Lapsus$ hacking group, which used MFA Fatigue attacks and other tactics that are known to be associated with this hacking group.
Recently, gaming company 2K also suffered a security breach, where the threat actor used their help desktop to send malware to customers. While there is no formal attribution to Lapsus$, 2K is owned by Take-Two Interactive, the parent company of Rockstar Games.
Due to the recent attacks, the attribution, and the age and location of the arrested individual, cybersecurity experts believe that the arrest is linked to the Lapsus$ group.
As the suspect is a minor, their name cannot be released by law enforcement under UK law.