3 ms·

Has someone actually suggested that the Sony attack was done by N.K? Edit: I mean is there some source that would back up the claim?

by oe 12y ago

jacquesm 12y ago
http://krebsonsecurity.com/2014/12/fbi-north-korea-to-blame-for-sony-hack/ http://krebsonsecurity.com/2014/12/fbi-north-korea-to-blame-...
rudolf0 12y ago
Several large and respected security companies agree with the FBI's assessment, like Crowdstrike. Crowdstrike claims to have been tracking the NK group that did it for years. They've published information about that group (whom they've codenamed SILENT CHOLLIMA) in the past, so they're telling the truth about that at least. Obviously that is not proof that they're correct, but it adds a bit of weight. And of course, the company that Sony hired to investigate and clean up the breach, FireEye/Mandiant, believe it was North Korea. FireEye and Mandiant also track APT groups; Mandiant notably released their report on one of China's state-sponsored cyberwarfare divisions, APT1, some time ago. There are some dissenting opinions from other companies, like Norse and ErrataSec's Rob Graham. They are skeptical. However, these companies do not share Crowdstrike's or FireEye's niche industry, which is tracking and defending against targeted and government-sponsored groups. As far as I can tell, the organizations that would best know whether it was North Korea and who have information directly related to the case (FBI, NSA, FireEye, Crowdstrike) believe it was North Korea. The dissenting opinions are from security experts who are undoubtedly intelligent and great in their respective fields, but are really just being armchair analysts. So unless you think all of these organizations are either incompetent or are colluding to intentionally lie to the public, then NK remains the most likely hypothesis. It is certainly possible NK retained help from non-NK individuals, and it is possible an insider was involved, but the prevailing hypothesis among a large part of the security community is that NK's government ordered the attack.

Has someone actually suggested that the Sony attack was done by N.K? Edit: I mean is there some source that would back up the claim?

by oe 12y ago

Has someone actually suggested that the Sony attack was done by N.K? Edit: I mean is there some source that would back up the claim?

jacquesm 12y ago

http://krebsonsecurity.com/2014/12/fbi-north-korea-to-blame-for-sony-hack/ http://krebsonsecurity.com/2014/12/fbi-north-korea-to-blame-...

rudolf0 12y ago

Several large and respected security companies agree with the FBI's assessment, like Crowdstrike. Crowdstrike claims to have been tracking the NK group that did it for years. They've published information about that group (whom they've codenamed SILENT CHOLLIMA) in the past, so they're telling the truth about that at least. Obviously that is not proof that they're correct, but it adds a bit of weight. And of course, the company that Sony hired to investigate and clean up the breach, FireEye/Mandiant, believe it was North Korea. FireEye and Mandiant also track APT groups; Mandiant notably released their report on one of China's state-sponsored cyberwarfare divisions, APT1, some time ago. There are some dissenting opinions from other companies, like Norse and ErrataSec's Rob Graham. They are skeptical. However, these companies do not share Crowdstrike's or FireEye's niche industry, which is tracking and defending against targeted and government-sponsored groups. As far as I can tell, the organizations that would best know whether it was North Korea and who have information directly related to the case (FBI, NSA, FireEye, Crowdstrike) believe it was North Korea. The dissenting opinions are from security experts who are undoubtedly intelligent and great in their respective fields, but are really just being armchair analysts. So unless you think all of these organizations are either incompetent or are colluding to intentionally lie to the public, then NK remains the most likely hypothesis. It is certainly possible NK retained help from non-NK individuals, and it is possible an insider was involved, but the prevailing hypothesis among a large part of the security community is that NK's government ordered the attack.