Friday, June 3, 2011

Sony Pictures confirms that more than 1 million accounts were attacked


News involving attack by hackers to Sony are as common as Tornante launches smartphones, but this one is particularly scary: the hacker group Lulz Security sent a file that has infected more than a million accounts. Addresses of users are in the package.


The staff of the Lulz says the huge leak include:
Personal information, including passwords, e-mail address, home address, date of birth and all information associated with those accounts. Among other things, we also commit all the administration details of Sony Pictures (including passwords), and 75 000 "music codes" and 3.5 million "coupons of music."

Not the kind of personal information that you expect to see the internet in a file on MediaFire (yes, he is there, but we will not give the link as a matter of respect).
But why did they do that? By slutty? To follow the wave? No. According to them, to teach a lesson:

Our goal in this attack was not to become one of the top teams hacker. Our goal was to reveal something important: SonyPictures.com was completely dominated by a simple SQL injection, one of the most primitive and common vulnerabilities, as we all know. With a simple attack, we access EVERYTHING. Why do you trust so much in a company that allows an opening to attack so large that simple?

While it is a hacker attack, the argument seems to make sense. All these personal data were stored in a simple notepad with zero or any type of encryption security system. To complete, Sony Pictures has confirmed that the gap really is real and it is "investigating" the case. It seems that Sony's mess is above average. After the recent attacks on the PSN, the company should put a thousand locks on all doors. It seems that there was not time to install everything.