It is reported that hackers leaked 75GB of Nvidia confidential files, including DLSS source code!

Last weekend, NVIDIA was targeted by the South American hacker group LAPSU$. LAPSU$ hacked into NVIDIA’s internal servers, causing more than 1TB of data leakage, and publicly sold the mining limit cracking algorithm of RTX 30 series graphics cards, and also asked NVIDIA to fully lift the restrictions.

According to the hacker group, the data they obtained includes NVIDIA's product design blueprints, drivers, firmware, documentation, tools, SDK development kits, and more. There's also everything about Falcon. Falcon is a special microcontroller architecture found in all Nvidia graphics cards, used in a wide range of functions from program security to memory replication to video decoding.

Seeing that Nvidia was indifferent, on February 28, the hacker group angrily disclosed part of the file data they had, that is, a 18.8GB RAR archive, which was up to 75GB after decompression, containing more than 400,000 files, and most of them were highly confidential. Source code, even DLSS source code!

On March 1, according to a report by foreign media techpowerup, an anonymous person sent them a screenshot, claiming to be a file listing of the NVDIA DLSS source code. The leaked version is DLSS version 2.2. The leaked information includes the C++ files, headers and other files that make up DLSS, as well as a "programming guide" document to help developers quickly understand the code and build it correctly.

It is reported that this technology is a pioneering AI rendering technology that uses the power of deep learning neural networks to increase frame rates and generate beautiful and clear images for games.

On March 1, Lapsus$ said that considering our respective positions and that of NVIDIA, it required NVIDIA to permanently open source all Windows, MacOS, and Linux versions of all released and future graphics card drivers under the FOSS project agreement. If it has not been done by this Friday, Lapsus$ will disclose the product specifications, drawings, and base media information of all Nvidia released and upcoming graphics cards.

At present, Nvidia has issued a new statement to Hardwareluxx, officially confirming the matter.

On February 23, 2022, NVIDIA discovered a cybersecurity incident affecting IT resources. After discovering this, we further strengthened our cybersecurity, hired cybersecurity incident response experts, and notified relevant law enforcement agencies.

We have no evidence that the ransomware was deployed on Nvidia's server environment or related to recent international conflicts. We know that the participants obtained employee credentials and some Nvidia-proprietary information from our systems and started leaking them online. Our teams are working diligently to analyze this information and the incident is not expected to cause any disruption to our business or our ability to serve our customers.

Security is an ongoing process and we take it very seriously, investing in the protection of our code and products every day.

Regarding the follow-up progress of this incident, we will continue to pay attention to the reports.