Sony network ransacked in huge brute-force attack
93,000 accounts broken into
Agentless Backup is Not a Myth
Sony has warned users against a massive bruteforce attack against PlayStation and Sony network accounts.
The attack – which used password and user ID combinations from an unidentified third-party source – succeeded in compromising 60,000 PlayStation Network and 33,000 Sony Online Entertainment network accounts. These accounts have been locked and passwords reset.
Credit card information is not stored on the dashboard of Sony accounts but it might have been possible that unauthorised charges were made against the wallets held on compromised accounts. Sony has promised to refund any such losses, as explained in a statement by Philip Reitinger, senior vice president and chief information security officer at Sony Group, on the PlayStation blog here.
Both the motive for the latest attack against Sony network users and the identity of the perpetrator(s) remains unclear.
Sony shut down its PlayStation Network in April in the aftermath of a far more damaging hack attack. The service wasn't restored until a month later. Personal information on 77 million account-holders was exposed as a result of the April PlayStation hack. Details including names, addresses, passwords and purchase histories was exposed by the megahack.
Sony was widely criticised for its handling of the incident, one of the biggest data breach incident (by volume of records) in history. ®
COMMENTS
Not Sony's Fault
So, the accounts were compromised because people re-used compromised login details, or had easy to guess passwords?
The fault this time lies entirely with the end user.
The sad thing is, given the choice between learning to increase their on-line security or blaming someone else (Sony), I know where the majority of 'victims' will fall.
Phew
Thank god they installed that chief information security officer after that last attack, otherwise they'd have no-one to fire over this one.
The motive?
It's to steal information, use accounts for spamming and phishing, and possibly there's a small smidgeon of 'we can f--k you up whenever we want, Sony' attitude mixed in.
But thievery is the primary motive. It always is, no matter what flowery bullsh*t is used to declare some sort of 'l33t' status.
IT infrastructure monitoring strategies
Requirements Checklist for Choosing a Cloud Backup and Recovery Service Provider
Data control in the cloud
Cloud based data management
Agentless Backup is Not a Myth
