9 ms·
‘All of Sony Systems’ Allegedly Hacked by New Ransomware Group
- yieldcrv 3y agoI’d like to see this become a more efficient market
- m3kw9 3y agoI like how all of Sony contains 6000 files
- devonbleak 3y agoVery large, very important files.
- thawab 3y agoThey're the best files you've ever seen, believe me. People are saying they're the most fantastic files in the history of files.
- eep_social 3y agoThat’s smaller than all of Sony was in 2011, er, 2014, well.. one of the previous hacks anyway.
- anemic 3y agoDue to the previous hacks they have successully reduced the number of files they have.
- deleted 3y ago[deleted]
- SanderNL 3y agoI believe it’s actually over 9000.
- m3kw9 3y agoI would have just wrote “6900 files”
- extrememacaroni 3y agoBecause pesky hackers keep stealing their files.
- Etheryte 3y agoMost of it is just one large file products-2-final-final-copy.txt that outlines how to make everything they sell.
- lionkor 3y agoYou mean "_A Copy of Products 2004-01-03 Final (Copy) Final.doc"
- ZeroCool2u 3y agoDidn't this happen to Sony already once before?
- silisili 3y agoWay more than once. I think this would be 5 or 6... Edit - Depending on what you count, this appears to be number 7? https://firewalltimes.com/sony-data-breach-timeline/ https://firewalltimes.com/sony-data-breach-timeline/
- IntelMiner 3y agoOne more and we all get a free month of PlayStation Plus!* *with purchase of a 2 year subscription
- ohthehugemanate 3y agoMany times. Before the first high profile hacks (that I remember) in 2011, Sony's CTO made a career of giving high profile talks about, essentially, reducing your IT budget by not doing security. Don't do pentests, don't do audits - they only uncover issues for your teams to fix! Certifications are an industry that sells you problems, he said. Ignore and skimp on the whole thing. IIRC there was even a great talk about how to ignore your engineers when they say something is urgent. He didn't get fired after the first round of hacks, and he wasn't fired after the 2014 round either. I wonder where he is now?
- jonny_eh 3y agoCan you, uh, provide evidence and a name? That's some inflammatory stuff there!
- johnnyworker 3y agoI'd love to see those talks too, because stuff like this needs to be preserved. Not to shame individuals but for the history of comedy in general.
- 3y ago
- hackermatic 3y ago> Within those 6,000 files are supposedly a bevy of documentation, including unknown “build log files,” a swath of Java resources, and HTML data. It sounds like they compromised a backwater CI/CD system or something.
- riffic 3y agoif a hacker wanted to be Sony's Jenkins admin, they should've just filled out a job application
- peteradio 3y agoThis was the only way to get past the automated screen.
- steve1977 3y agoKnowing Sony‘s websites, it was probably the only way getting past the login page…
- throeaaysn 3y ago[dead]
- emodendroket 3y agoYeah the data doesn't seem very high-value.
- lagniappe 3y agoI usually feel bad about the victims of ransomware, but in this case I feel a little less bad, since in the past Sony has betrayed trust by attempting to install their own rootkits on unsuspecting user's hardware. When they got called out, they made a removal tool that collected more data from the users who used it. https://en.wikipedia.org/wiki/Sony_BMG_copy_protection_rootkit_scandal https://en.wikipedia.org/wiki/Sony_BMG_copy_protection_rootk...
- blatherard 3y agoNot to excuse it, but that was 18 years ago. Anything more recent?
- bravetraveler 3y agoInteresting, around the same time I recall some service with 'free' CDs from them. I forget the specifics on the service, but they tricked teenager me. I didn't realize that they intended to charge some fees Anyway, funny they were basically giving these away and putting egregious 'DRM' all at the same time.
- boomboomsubban 3y agoI'm assuming you're talking about those mail order CD things that promised ~10 CD's for a penny, plus shipping and handling. This also confirmed your subscription to a service which sold you two CDs per month at full retail price plus shipping for at least a year unless you explicitly refused each one. I don't think you even got to choose which CDs you got. Malware wasn't the point. They sent off unsold stocks of old CDs, made you "buy" new releases which would count for Billboard and the such, and charged you a ton for doing it.
- bravetraveler 3y agoThat sounds about right - I was a foolish kid :P Don't give this too much stock, playful speculation/pointing of irony on what's already an aside. There was some selection for what was sent. Not just some random collection of whatever... at least entirely; I'm not sure. Maybe only the original set - doesn't matter anyway.
- fbdab103 3y agoIs there a database of these big corporate hacks anywhere? Furthermore, is there any categorization of the method that was used? I am curious of the ratio: X% mix-configured cloud permissions, Y% bad defaults, Z% unpatched 9-year old vulnerability, N% most minimal social hacking, etc Probably too much egg on everyone's face to get public post-mortems, but I would enjoy knowing more.
- qingcharles 3y agoThere's this? https://haveibeenpwned.com/PwnedWebsites https://haveibeenpwned.com/PwnedWebsites
- tapland 3y agoOne good one for data breaches is Mozillas: https://monitor.firefox.com/breaches https://monitor.firefox.com/breaches
- basch 3y agoDoesn’t cover corporate attacks. The latest MGM isn’t there.
- ziddoap 3y agoThere is generally going to be a lag between a breach being reported in the news and the breached data being processed & organized for services like Monitor & HaveIBeenPwned (this also assumes the breached data is posted publicly rather than being sold privately or held for ransom).
- red-iron-pine 3y agofrom the website: > It can sometimes take months or years for credentials exposed in a data breach to appear on the dark web. Breaches get added to our database as soon as they have been discovered and verified.
- deleted 3y ago[deleted]
- andersa 3y agoSounds fake. Sony would have like a hundred million files, not 6000.
- sacnoradhq 3y agoPerhaps these are backups or archives.
- ourmandave 3y agoOr they ran a diff and there's only 6000 new ones since the last hack.
- onlyrealcuzzo 3y agoI love the efficiency of hacking going on at Sony!
- deleted 3y ago[deleted]
- ilyt 3y agoif it is database dumps of 6000 databases... or just machine backups
- SnorkelTan 3y agoClosing a playstation account seems to be harder than hacking them.
- deleted 3y ago[deleted]
- simmerup 3y ago> “We have successfully [compromised] all of [Sony’s] systems,” Ransomed.vc proclaimed. “We won’t ransom them! We will sell the data. Due to Sony not wanting to pay. DATA IS FOR SALE. WE ARE SELLING IT.” The key detail. If Sonys not willing to pay these 6000 files are not important.
- eddiewithzato 3y agoSony paying = Sony saying to the hackers please still our data we will give millions. There is no doubt the hackers would take sonys money and then sell the data anyway. You will lose badly by paying them. You have to consider the breach as a total loss if you are Sony, paying up ransomware is foolish decision. The target for these hacks is always for the company to pay, so companies not paying is a very good play.
- simmerup 3y agoWhile true sometimes, like when the US says they won't negotiate with terrorists, the realpolitik is that if the data is valuable enough normally companies will pay for it. Most won't take some moral stand that costs them money.
- AndroTux 3y agoOf course companies would pay for data if they had the choice. And small companies often do in case of a ransom attack. But if you're as big as Sony, there's really no upside to paying them. Like the other commenter said, if they did pay, the attackers would without a doubt still sell the data to others. Why wouldn't they? It's not like they have any morale. And to make things worse, this would just signal to other hacker groups that hacking Sony is very profitable, since they apparently are happy to pay. So they would just increase the target on their back. No upside.
- simmerup 3y agoRansomware encrypts files on the disk also. The business pays to unencrypt the files and achieve business as usual operations. The business doesn't need to trust the attackers not to further share data to get their upside, though I'm sure that helps.
- gweatidea 3y agoSony is one of the coolest companies. Hack them, challenge them, force them to become better, harder, faster, stronger. Fuel their evolution. If there is one brand in the world that can become human again, it's Sony.
- deleted 3y ago[deleted]
- totetsu 3y agoIs this Sony Interactive Entertainment LLC or Sony Pictures Entertainment or Sony Music Entertainment or Sony Electronics Inc. or SOA or Sony Group Corporation KK ?? What an all of sony possibly mean?
- downrightmike 3y agoI had a hell of a time for the last month trying to login to playstation's website where it asked me to count dice in 20 pictures. I wonder if that is related, because I gave up.
- developerDan 3y agoI’m glad I’m not the only one having captchas cycle a dozen times or more without granting access. But I’m sure we will come up with something even more annoying to replace captchas.
- downrightmike 3y agoIt seems that this happens, but rarely, something like once a year with Sony, so I never thought it was an attack response. But it make sense now.