- Kyle Chua
Ransomware Gang Claims To Have Breached Sony's Systems
Updated: Dec 18, 2023
Sony's internal resources may have been compromised, if a ransomware gang is to be believed.
According to a report by Cyber Security Connect, the Japanese tech giant was targeted by Ransomed.vc, who managed to steal screenshots of Sony's internal log-in page, an internal PowerPoint presentation that outlines test bench details, various Java files and a document tree of the whole leak consisting of less than 6,000 files.
"We have successfully [compromised] all of [Sony’s] systems," Ransomed.vc announced on its leak site, both on the clear and dark web. "We won’t ransom them! We will sell the data. Due to Sony not wanting to pay. DATA IS FOR SALE. WE ARE SELLING IT."
Among the files that have been compromised – many of which feature Japanese characters – include documentation of unknown “build log files,” Java resources and HTML data.
Ransomed.vc did not list a price for the data, but it did leave its contact details for the Tox messaging service, along with Telegram and email details, for Sony to get in touch. The gang also listed a “post date” of 28 September 2023, suggesting if no one purchases the data, this will be the date it'll all be published.
Sony has yet to publicly address the breach and have yet to respond for comment when asked by Cyber Security Connect.
Ransomed.vc is said to be relatively new to the scene, only being in operation since September. The gang of hackers, however, has connections to dark web forums and groups launching similar ransomware operations. It's also both a ransomware operator and ransomware-as-a-service organisation, meaning it also works with the European Union's in spotting and reporting vulnerabilities in public systems and violations of the general data protection and regulation (GDPR), apart from targeting wealthy corporations.
Cyber Security Connect notes that in some cases, Ransomed.vc leverages the law to its favour. "In cases where payment is not received, we are obligated to report a Data Privacy Law violation to the GDPR agency!” the gang writes on its leak site.
Sony's systems were reportedly breached by Ransomed.vc, a relatively new ransomware gang that's managed to seal screenshots of Sony's internal log-in page, an internal PowerPoint presentation that outlines test bench details and various Java files, among others.
"We won’t ransom them! We will sell the data," the gang wrote on a leak site.
Ransomed.vc did not list a price for the data, but it did leave its contact details for the Tox messaging service, along with Telegram and email details, for Sony to get in touch.
The Japanese tech giant has yet to publicly address the breach.