Phishing Site Discovered On Sony Thailand Servers
mcgrew tips news that security firm F-secure has found a live phishing site running on Sony's Thailand servers. "Basically this means that Sony has been hacked, again. Although in this case the server is probably not very important." This comes alongside news that a point service run by So-net, a Sony subsidiary, was accessed by an unknown intruder, who stole about $1,200 worth of virtual tokens. "The intrusions are believed to have taken place on May 16 and 17. So-net discovered the breach on May 18, after receiving consumer complaints. So-net halted the point redemption service following the discovery of the breach. The latest breaches are relatively minor in scale compared to the massive breach at PSN and Sony Entertainment Online. Even so, it only adds to the company's embarrassment."
Every year I spent half an year living in Thailand. With all the fine ladyboys and fun time around, I'm not surprised no one cares about the servers.
Ivan Vanko: [laughs] If you could make God bleed, people would cease to believe in him, there will be blood in the water, the sharks will come. All I have to do is sit back and watch as the world consumes you. Not that Sony was ever a God but the idea holds for any giant corporation with enough money buy the best security in the world. They were made to bleed and this won't be the last of these.
"Chinese Amazons, power armor, laser swords.... things just meant to be." - Shampoo, A Very Scary Bet
The only way to deal with a mad dog is to kill it, without hesitation... Eat it raw, Sony!
For justice, we must go to Don Corleone
Seems Sony in Thailand uses a shared hosting setup. More details @ ThreatSTOP's Blog
Make. Believe, indeed.
Sony definitely have a mountain to climb if any consumer is really going to believe in them again. They haven't just dropped the ball in regards to a few basement dwelling geeks, but have dropped the ball in-front of a crowd the tens of million.
Man, that's a bit amateurish on the side of the phishers.
They had access to a *SONY* server. The same Sony who just admitted issues on their systems. Surely they should've just set up a fake phishing site imitating Sony? I mean, set up a realistic looking Sony form asking for way more information than you need, host it on Sony server so Sony's domain points to it, put it in a plausible looking path, and send out an email faking a Sony return address.
Honestly, this would present such a great phishing and drive-by-download install opportunity, I'm surprised they didn't use it. It originates from a Sony email address, the link points to a Sony server (and even if they type it in themselves, it's still Sony's domain), but a third party is really phishing that information. I'd guess you'd get a good chunk of people filling that information in. Forward them to the real Sony login page...
If they had access to the Sony SSL server... oh my.
Something like this would pass most of the basic sniff tests for phish emails and make it almost impossible to determine if it's really Sony or a phisher using Sony's server.
Back in the earlier parts of the century when I played a more active role in spam fighting I used to find all sorts of open relay servers and fishing sites. There was a time when all sorts of educational institutes on the American east coast and mid west were crawling with these. That was never headline news, that was also ignored by the institutes themselves, you had to shout at their upstream to get anyone to take action. This minor hack should not have been news, it would not have been if it wasn't for the playstation hack.
Don't give me that shit about being 'a different part of Sony
Am i supposed to buy a Xbox360? I mean, MS has screwed me numerous times in the PC market. A few OEM products failed to reinstall after a PC repair. Neither MS nor the manufacturer could give me an explanation or solution. I have legit copies of Windows Vista Business and Windows 7 Professional purchased through the MSDNAA. I've lost access to that account(not a current student) and the product keys stored with it. No help there either
Should I avoid getting a xbox360? Where does that leave me if i wanna play games from this generation? PC? nope....I'd be giving into to Microsoft again. Oh, and Nintendo Wii is a joke.
I guess my point is that you can differentiate one product or service from another in regards to a big corporation. Do you think the guys tasked with improving the Windows user experience care about Xbox users? I doubt it, unless they're pushing for more seamless integration. Even then, theres another guy whose the "integration specialist"
I think Sony is making a blindingly clear case that there is room in the market for a 4th (3rd? do we even count the Wii anymore as a serious contender for the adult market?) serious gaming console with a more mature online presence than Sony does. Apple comes to mind, but still seems far fetched. Maybe we'll see Mitsubishi or some German company throw their hat in to the ring?
If someone had a product in development, we'd have heard their marketing machine start rumbling, but the lack of a third contender means that people are writing up business plans/proposals for VCs around the world. By day 30 of the outage people will be speculating what this third console will be.
moox. for a new generation.
I think Sony is making a blindingly clear case that there is room in the market for a 4th (3rd? do we even count the Wii anymore as a serious contender for the adult market?) serious gaming console with a more mature online presence than Sony does.
Yes, that company would have been named Sega; they were the first to bring a console with an integrated modem and first to offer ethernet. Sony murdered them by knowingly publishing fraudulent specs for their console. I know I'm not the only one who didn't buy a DC because the PS2 was supposed to be better. The only way in which it was is that it was a DVD player... one of the worst ever made in terms of image quality.
"You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
Am i supposed to buy a Xbox360? I mean, MS has screwed me numerous times in the PC market...
Nothing you describe strikes me as anywhere near the malice of including a rootkit on a music CD, or removing a feature from a console which was a key selling point of said console, or the carelessness of exposing the sheer volume of personal information they have.
Should I avoid getting a xbox360? Where does that leave me if i wanna play games from this generation? PC? nope....I'd be giving into to Microsoft again.
Given that you need some sort of a PC -- that is, Personal Computer -- I don't really see how. You've still got Mac and Linux, and while I don't like the idea of paying for Windows any more than you do, it's at least an "open" platform in the sense that you get pretty much any indie game anyone wants to make for it.
Oh, and Nintendo Wii is a joke.
In what sense?
If it's graphics you care about, that's another point in favor of the PC, in theory. The problem here is that many modern games are designed for consoles, so there are a lot of PC games out there which, well, suck on the PC.
I guess my point is that you can differentiate one product or service from another in regards to a big corporation.
Yet what Sony's shown us lately is a lot of malice and contempt for their customers. Even if we ignore the rootkit, the PS3 shit so far has been far worse than Microsoft's typical MO.
For the moment, I'm alright with playing games on Windows using my "free" copy of Windows 7 provided by my school -- and I'm not likely to lose that product key, ever, Microsoft would have to actually invalidate it. Even here, it's the exception -- I booted Windows to play Portal 2, and then I went back to Linux. Busy as I am, I can't afford to spend much time gaming, which means I simply don't run out of games to play on Linux, DRM-free. It's not happening in the mainstream as much lately, but indie games seem to be using cross-platform support (Win/Mac/Linux) as a major selling point.
Whether they're from "this generation" depends what defines a generation. I mean, Aquaria is from 2007, years after this generation's consoles appeared -- and it's absolutely beautiful and really fun to play, and you absolutely should check it out, but it's still a side-scroller. Braid and Minecraft are like that, too -- not exactly state-of-the-art graphics, but cool concepts. Towards the higher end, there's stuff like Penumbra and Amnesia. And more than half the games I listed are open source, and I haven't even gotten into the well-known open source free-as-in-beer stuff -- Xonotic (was Nexuiz) is based on Darkplaces, which was based on Quake, but Nexuiz always felt like it had decently modern graphics, though most of it could be turned off for performance, and I imagine Xonotic will be the same. So there you go, there's even GPL'd games that could be considered "current-gen" unless you want to further define what you mean by that.
Don't thank God, thank a doctor!
I can see it now:
2012 will be the year of Linux on the console (yes i know Sony yanked support for it)
A Console based on *BSD or Linux, I know there has been attempts. Screw em lets make it happen. Of course the hard part is DRM which many companies are afraid of leaving out of their product.
The trick to it would be get a chipmaker behind it, which makes me think we are a little short in the GPU market out there. The prior Apple comment might be somewhat right PowerVR is becoming quite the contender on the mobile end. Maybe they need to release a PCIe card to test the water.
I don't like Sony as a company, but this is one time I'm not sure if the claims against them are actually true. The article gave next to no details, and the site is already down so I can't look at it to see.
It's an Italian site and one of the words in the URL apparently translates to 'holder' - which makes me wonder if it was a development site that wasn't intended to be public. I'll admit it seems weird it's on a Thailand domain, but I would like a better explanation of what hdworld.sony is before I blame them for getting hacked. Are they providing shared hosting for some service and not checking the content regularly?
There just isn't enough information on this one.
This doesn't necessarily mean that Sony was hacked. Maybe Sony just decided to get into the phishing scam business...
I for one, feel sorry for any company that gets infecte.... - what's that? Oh this is Sony? Fuck them.
...impending doom for Sony/SoE.