Password security

Hackers contacted top Sony executives before attack

Life
Image: IDGNS

9 December 2014

Top executives at Sony Pictures received an e-mail extorting money three days before the company’s computer network was taken offline in a major hack.

The e-mail was among thousands released on Monday when the inboxes of two top Sony executives were leaked online. It was the latest release of embarrassing corporate information following a major hack on the company’s computer networks two weeks ago.

“We’ve got great damage by Sony Pictures,” the message began. “The compensation for it, monetary compensation we want.”

“Pay the damage, or Sony Pictures will be bombarded as a whole. You know us very well. We never wait long. You’d better behave wisely,” it reads.

The e-mail was titled ‘Notice to Sony Pictures Entertainment’ and was sent from a Gmail account registered in the name of ‘Frank David’. It was addressed to five top Sony executives.

The IP address of the sender wasn’t visible because Gmail’s Web interface appears to have been used to compose but there was one interesting detail in the note.

It was not signed in the name of Guardians of Peace, the name used by hackers who claimed responsibility for the attack, but was signed ‘From God’sApstls’. That text appeared in a different font, as if it had been cut and pasted into the message.

The God’sApstls name was found inside the malware that attacked Sony, said Symantec.

The e-mail files of the two executives were uploaded to file-sharing sites and the Bit Torrent file-sharing network, and links to them were posted in a message that claimed to be from the same hacking group behind the Sony attack.

Demands
“We have already given our clear demand to the management team of Sony, however, they have refused to accept,” said the message pointing to the files. “We are sending you our warning again.”

The hackers said the e-mail inboxes belong to Steve Mosko, president of Sony Pictures Television, and Amy Pascal, co-chairman of Sony Pictures Entertainment.

The Microsoft Outlook mailbox files run to several gigabytes and apparently contain thousands of messages sent to and by both executives over several months.

A handful of the e-mails, seen by IDG News Service, appear to include discussions between company executives, lists of phone messages that include contact details for executives at other companies, business information, and personal messages to family members.

In one file, the most recent messages point to the e-mail box being copied on the evening of 22 November. Sony first learned of the hack on 24 November, when computer screens at the company showed a message telling users the network had been hacked.

The release of the e-mail files is another blow to Sony Pictures, which is still attempting to determine who was responsible for the attack on its network. The company has been quiet on the investigation since it launched two weeks ago. Private computer security companies and the US Federal Bureau of Investigations are understood to be spearheading the probe.

An initial leak of corporate data soon after the hack revealed thousands of files stolen from company servers. They included confidential business information, the salaries of Sony Pictures employees, staff medical records and computer passwords.

The company did not immediately respond to a request for comment.

Martyn Williams, IDG News Service

Read More:


Back to Top ↑

TechCentral.ie