In a shocking turn of events, a London jury has found 18-year-old Arion Kurtaj, a member of the notorious hacking group Lapsus$, guilty of hacking Uber and fintech firm Revolut, as well as blackmailing the developers of the popular video game Grand Theft Auto. Kurtaj's cybercrime spree began in September 2022, while he was on police bail for previous offenses. According to prosecutors, Kurtaj first targeted Revolut, gaining access to the personal information of around 5,000 customers. Just two days later, he turned his attention to Uber, causing nearly $3 million in damages. Both companies have yet to comment on the issue.

Not stopping there, Kurtaj then hacked Rockstar Games, the creators of Grand Theft Auto, and sent a threatening message to all Rockstar staff, indicating that he would release the source code for the company's planned sequel if his demands were not met. He even went as far as hacking and uploading clips of the latest installment of the game to an online gaming forum. Rockstar Games has not responded to requests for comment.

It is worth noting that Kurtaj, who has autism, was assessed by psychiatrists as not fit to stand trial, which prompted the jury to focus on determining whether he had committed the acts rather than delivering a guilty or not guilty verdict. This is not the first time Kurtaj has been involved in hacking and blackmail. In 2021, he targeted BT Group, the largest broadband provider in Britain, and mobile operator EE, demanding a $4 million ransom. He also hacked chipmaker Nvidia Corp in February 2022, stealing sensitive data and threatening to publish it. Both BT Group and Nvidia Corp have yet to respond to the recent developments.

During the trial, it was revealed that Kurtaj was not the sole perpetrator in these crimes. A 17-year-old, whose name cannot be disclosed for legal reasons, was also found to be a key player in Lapsus$. This individual was found guilty of fraud and blackmail charges relating to Nvidia, but was acquitted of similar charges relating to BT. Moreover, the 17-year-old had previously pleaded guilty to other Computer Misuse Act offenses.

In total, Kurtaj was found guilty of 12 offenses, including blackmail, fraud, and Computer Misuse Act violations. The jury's verdict highlights the severity of cybercrime and its potential consequences. The case serves as a reminder for individuals and companies to remain vigilant and take necessary measures to protect their digital assets from such malicious activities.