AMD Confirms Hacker Stole Information on Graphics Products

Source: Securityweek

AMD has confirmed that a hacker has stolen files related to some of its graphics products, but the company says it’s not too concerned about the impact of the leak.

A hacker who uses the online moniker “Palesa” claims to have obtained source code files related to several AMD graphics processing units (GPUs), including the Navi 10 architecture, which is used in some Radeon RX 5000-series graphics cards, the upcoming Navi 21, and Arden. Arden is the codename for the GPUs that will power Microsoft’s upcoming Xbox Series X consoles.

Palesa told SecurityWeek that the files were taken from a server owned by AMD, not from a contractor. The hacker is hoping to obtain some money for the files, either from AMD or someone else.

Palesa claims to have already received some “good offers in bitcoin” for the files — the hacker says the offers range between $50,000 and $100,000 — but they are waiting for “AMD to speak on this.”

In a statement published on its website, AMD described the stolen files as “test files related to a subset of our current and future graphics products.” The company said it was contacted by someone claiming to have the files in December 2019.

Palesa recently made available some of the stolen files on GitHub, but they were removed as a result of a DMCA takedown request filed by AMD. Some screenshots of the stolen files are still available on GitHub and the hacker has promised to send proof to anyone interested in buying them.

“While we are aware the perpetrator has additional files that have not been made public, we believe the stolen graphics IP is not core to the competitiveness or security of our graphics products. We are not aware of the perpetrator possessing any other AMD IP,” AMD said.

“We are working closely with law enforcement officials and other experts as a part of an ongoing criminal investigation,” the company added.