Japanese electronics and entertainment giant Sony has launched an investigation after a cyber extortion gang claimed to have breached the company’s systems and made off with valuable data.
Claims of the hack appeared on the dark web victim blog belonging to a relatively new ransomware group named RansomedVC who boasted that they “successfully compromissed all of sony systems.” The hackers said they intend to sell the stolen data because Sony doesn’t want to pay a ransom.
The gang leaked some of the allegedly stolen information, including what appears to be a PowerPoint presentation from Sony’s quality assurance division, internal screenshots displaying what could be a Sony workstation, and some Java files.
The group told the tech news site BleepingComputer that they have stolen 260 GB of data during the Sony attack and put it up for sale for $2.5 million.
Meanwhile, another threat actor known online as “MajorNelson” refuted RansomedVC’s claims calling them scammers. AS proof, the threat actor posted a compressed archive on the BreachForum hacker forum containing 3.14 GB of data allegedly stolen from Sony.
According to MajorNelson, the leak includes credentials for the internal systems and files related to SonarQube Creators, Cloud Sony's certificates, a device emulator for generating licenses, Qasop security, and incident response policies.
Sony has refused to comment on the situation, citing the ongoing investigation.
