After the hacking of Sony's Game website, here is another hacking event on Sony's life. Sony Pictures was hack and the group claiming the responsibility for the rupture, “LulzSec”, the name of the group behind the recent PSB website attack.
A statement from the LulzSec group reads, in part:
"SonyPictures.com was owned by a very simple SQL injection, one of the most primitive and common vulnerabilities, as we should all know by now. From a single injection, we accessed EVERYTHING. Why do you put such faith in a company that allows itself to become open to these simple attacks? What's worse is that every bit of data we took wasn't encrypted. Sony stored over 1,000,000 passwords of its customers in plaintext, which means it's just a matter of taking it. This is disgraceful and insecure: they were asking for it."
And the group doesn’t take only one account but over 1,000,000 accounts including the passwords, as what the statement is concern:
"We recently broke into SonyPictures.com and compromised over 1,000,000 users' personal information, including passwords, email addresses, home addresses, dates of birth, and all Sony opt-in data associated with their accounts. Among other things, we also compromised all admin details of Sony Pictures (including passwords) along with 75,000 'music codes and 3.5 million 'music coupons'."
As of this moment, SonyPictures.com was running normally, but it cannot cover the fact that they were hacked and millions of accounts were exposed to the hacker/hackers.
This information was from Time.com
Comments
Post a Comment
Thanks for the comment