4 ms·
Reposting from another thread because it's more relevant here: Here's something I am curious about: if this was NK and it is in response to The Interview, how
by codezero 12y ago
Reposting from another thread because it's more relevant here:
Here's something I am curious about: if this was NK and it is in response to The Interview, how did they get so deep so quickly? Other state sponsored hacks seem to span multiple years with multiple iterative hacks that get deeper into the target, but The Interview only wrapped shooting a year ago and wasn't really publicly known until mid 2013.
- lawnchair_larry 12y agoOther hacks have nothing to do with this one. Someone at Sony opened a phishing email. That about does it.
- codezero 12y agoWhy don't other attacks act as a litmust test here? One person opening an email doesn't open up access to every system and all the data in one fell swoop. Ok an email was opened. And then... It takes time to go from one system to the next, so why did his happen so fast?
- lawnchair_larry 12y agoIt doesn't take time once you get Domain Admin, and there is no indication of how fast it happened. I've seen companies lose DA, and therefore their entire enterprise, in hours. You can then push malware to everyone on the domain.
- codezero 12y agoThanks, this is helpful, I didn't realize so much of their infrastructure was tied up with a single point of failure :(
- jn1234 12y agoI think he meant that the malware that was used was pretty advanced and the information that was hard-coded would've taken a lot of time to gather. The movie's premise was only publicly announced last June.
- rjaco31 12y agoMost of those "APT"s start with someone opening an email..
- Arnt 12y agoHearsay alert: Sony was penetrated by several independent parties, in 2013, and at least one of the penetrating parties used the access for financial gain.