Former Ubiquiti Employee Charged with Data Theft

Ubiquiti Inc. is a technology company based in San Jose, California created in 2003. Having its headquarters in New York City, Ubiquiti produces and distributes wireless data transmission and wired equipment for businesses and residences under a variety of brand names.

What Happened?

Nickolas Sharp was recently arrested and charged with data theft and extortion while acting as a whistleblower and anonymous hacker.

As alleged, Nickolas Sharp exploited his access as a trusted insider to steal gigabytes of confidential data from his employer, then, posing as an anonymous hacker, sent the company a nearly $2 million ransom demand.

As further alleged, after the FBI searched his home in connection with the theft, Sharp, now posing as an anonymous company whistleblower, planted damaging news stories falsely claiming the theft had been by a hacker enabled by a vulnerability in the company’s computer systems.

Source

As reported by BleepingComputer, Sharp stole terabytes of secret data from Ubiquiti’s AWS (on December 10, 2020) and GitHub (on December 21 and 22, 2020) infrastructures using his cloud administrator credentials, cloning hundreds of GitHub projects through SSH, according to the indictment.

The defendant attempted to conceal his home IP address by using Surfshark’s VPN

Read More: https://heimdalsecurity.com/blog/former-ubiquiti-employee-charged-with-data-theft/