Nokia investigates breach after hacker claims to steal source code

Nokia is investigating claims by the threat actor IntelBroker that it exfiltrated and is offering for sale Nokia source code and numerous credentials after compromising a third-party contractor's SonarQube server; Nokia says it has found no evidence to date of direct impact to its systems. The alleged haul includes SSH and RSA keys, BitBucket logins, SMTP accounts, webhooks, and hardcoded credentials, and IntelBroker has previously been linked to multiple vendor-related breaches.