The hackers who claim to have stolen 1TB of data from Nvidia are now trying to sell the information, including a way to unlock the Ethereum mining limiter on the company’s PC graphics cards.
The hacking group, dubbed LAPSUS$, floated the offer to any interested buyers on Monday in the group’s public chat room. The hackers claim to possess a customized driver, capable of easily unlocking Nvidia’s Lite Hash Rate limiter across the RTX 3000 GPU series.
“If someone buy us the LHR, we will provide ways to [mess with] LHR without flashing anything,” the hackers wrote, while adding. “Without flashing = big money for any miner developer.”
The sale occurs after the hackers initially encountered a problem when trying to steal data from Nvidia. According to LAPSUS$, Nvidia retaliated by encrypting a machine the hackers were using to exfiltrate the data from the company.
However, LAPSUS$ claims Nvidia only managed to encrypt one of the group’s virtual machines during the breach. “BTW (By the way) Nvidia tried but failed, we have all the data,” the hackers added.
Nvidia did not immediately respond to a request for comment. But LAPSUS$ has been demanding Nvidia cooperate. In the meantime, the hacking group has already dumped a 19GB archive that allegedly contains source code for Nvidia GPU drivers.
The archive also has enough information to help tech-savvy users undermine the Lite Hash Rate limiter. “Any developer with a good brain can compile what we gave you,” the hackers went on to say.
On Sunday, the group also demanded that Nvidia lift the LHR limiter for all RTX 3000 graphics cards through a software update to consumers. If Nvidia didn’t, LAPSUS$ said it would leak a large folder containing information on the company’s hardware. However, the hacking group now says it wants to sell a driver capable of lifting the Lite Hash Rate limiter.
So the earlier demand may have been an attempt to gain publicity. Another possibility is that LAPSUS$ is lying, and desperate to monetize the hack in any way possible.
It's also important to note the breach occurs days after another hacker claimed to be offering a way to unlock the Ethereum mining limiter on Nvidia's graphics cards. However, the tool turned out to be a Trojan malware program.
Although Nvidia didn’t immediately respond to a request for comment, the company has previously said: “Our business and commercial activities continue uninterrupted. We are still working to evaluate the nature and scope of the event and don't have any additional information to share at this time.”