Sony has been featured on the dark web in a data extortion blog posted by the group known as Ransomedvc, who assert that they have successfully infiltrated Sony’s systems and pilfered sensitive information. This incident marks the second breach for Sony within a few months, following the MOVEit Transfer vulnerability attacks.
In their blog, Ransomedvc claimed to have compromised all of Sony’s systems but declared they wouldn’t be requesting a ransom. Instead, they allege that Sony has refused to pay to recover the data and intends to sell it. The group has threatened to release the purportedly stolen data on September 28th.
Included with these claims are samples of the data, such as a PowerPoint presentation from Sony’s quality assurance division, internal screenshots that may depict a Sony workstation, and some Java files.
As of the time of writing, Tech Monitor has reached out to Sony for comment but has not received a response.
This alleged attack follows the earlier breach by the Russian ransomware group Cl0p, which accessed Sony’s data during its global attack on businesses utilizing a vulnerability in the MOVEit Transfer file transfer software. Numerous companies worldwide, including major corporations, fell victim to this attack. Sony experienced data theft in June during the initial wave of breaches. Ransomedvc was first identified by cybersecurity researchers in August, and they assert themselves as the foremost entity in the realm of digital peace taxation.
The group’s ransom demands have varied, ranging from $54,000 to $218,000, according to security firm Flashpoint. Ransomedvc maintains that their charges are lower than the fines companies could face for breaching Europe’s GDPR data laws, which can reach into the millions of Euros. This lower pricing strategy may be an attempt to increase the likelihood of victims complying with their demands, as suggested by Flashpoint.
Read more: Louise Redknapp pulls out of Eternal reunion over LGBTQ row
2 Comments