The group behind the Nvidia hack asks that they disable the LHR in exchange for not leaking information

On Friday, a report about a possible Nvidia hack surfaced, and now the South American group LAPSUS claimed the hack, and tested it by uploading some files. As reported, they have 1TB of files that include everything from GPU schematics to driver source code, BIOS, and software, including the new LHR system, and so far they have not heard from Nvidia.

To prevent the leak of anything related to hardware, which could expose great details about the architecture of the GPUs to its competitors, LAPSUS required Nvidia to release new bios and drivers that remove the LHR restrictions. “If they remove the LHR we will forget about the hw folder (It’s a big folder). We both know the impact of LHR on mining and gaming” they mentioned.

Nvidia tried to fight back against LAPSUS, although it was not enough

Several news about this hack came out over the weekend, and one of them mentioned that Nvidia counterattacked the hackers, encrypting all the stolen files. LAPSUS confirmed it, although they clarified that they only encrypted the files present in a virtual machine connected to Nvidia’s internal VPN, through which they managed to steal all these files, and that they have backups of the information, so this Nvidia counterhack could not prevent them from continuing to have all the stolen information.

Nvidia also disabled several download links to the published information on the grounds of copyright, although the group is now distributing them via torrent, so all the company’s efforts have been in vain for now.

The company has not yet officially confirmed the attack

At the moment, the only official statement from Nvidia was that they are investigating the accident, although they did not confirm or deny anything. It will be interesting to see if the company finally admits to this attack, and what they plan to do about it to prevent the files from being leaked. We doubt that they will disable the LHR as requested by LAPSUS, although they can surely reach some other agreement.

What do you think about this attack on Nvidia? Do you think they will be able to reach an agreement with LAPSUS to avoid leaking the information?

Sources: Videocardz, @vxunderground