Contents
How did Sony get hacked?
The attackers used a number of other targeted elements, including spoofed spear phished emails that appeared to come from the Facebook accounts of Sony staffers. These emails were infested with malware attachments. Other emails were sent to AMC Theater personnel.
How was Sony breached?
In late November 2014, Sony Pictures Entertainment was hacked by a group calling itself the Guardians of Peace. The hackers, who are widely believed to be working in at least some capacity with North Korea, stole huge amounts of information off of Sony’s network.
What happened to Sony hack?
Sony has bolstered its cyber-security infrastructure as a result, using solutions to prevent similar hacks or data loss in the future. Sony co-chairperson Amy Pascal announced in the wake of the hack that she would step down as of May 2015, and instead will become more involved with film production under Sony.
When did the hack of Sony Pictures happen?
November 24, 2014 release of hacked confidential data from the film studio Sony Pictures. The headquarters of Sony Pictures in Culver City, California, United States. On November 24, 2014, a hacker group which identified itself by the name “Guardians of Peace” (North Korean) leaked a release of confidential data from the film studio Sony Pictures.
What kind of information was stolen from Sony?
The data included personal information about Sony Pictures employees and their families, emails between employees, information about executive salaries at the company, copies of then-unreleased Sony films, plans for future Sony films, scripts for certain films, and other information.
Who is the lawyer for the Sony hack?
Earlier this week, a lawyer representing Sony Pictures sent a letter to media outlets covering documents leaked by the hackers demanding that they not download future leaks and that they destroy stolen data already in their custody.
How are shares accessed in a Sony hack?
● SMB Shares ● Users have access to shares ○ Some shares are hidden (append a “$”) ● SYSTEM processes can gain access to “IPC$” ○ No need for username or password ○ Called a Null Session ● Can enumerate usernames, shares and password requirements in a null session ● Learning this information makes brute force attacks easier