Powered by MOMENTUM MEDIA
cyber daily logo

Breaking news and updates daily. Subscribe to our Newsletter

Breaking news and updates daily. Subscribe to our Newsletter X facebook linkedin Instagram Instagram

Sony hack gets complicated: Second hacker leaks data, calls Ransomed.vc ‘scammers’

Days after relative ransomware newcomers claimed to have breached “all of Sony systems”, a second apparent hacker has poured cold water on the group’s apparent breach.

user icon David Hollingworth
Wed, 27 Sep 2023
Sony hack gets complicated: Second hacker leaks data, calls Ransomed.vc ‘scammers’
expand image

Plus, to add insult to injury, the hacker has posted what they claim to be the whole leak on a popular clear web hacking forum – to download for free.

An individual going by the name of MajorNelson – a reference to a popular Microsoft employee who worked on the Xbox brand – posted overnight, saying: “You journalists believe the ransomware crew for lies. Far too gullible, you should be ashamed. RansomedVCs are scammers who are just trying to scam you and chase influence.”

“Enjoy the leak,” they added before including a link to a two-gigabyte archive for download.

According to MajorNelson, the leak includes “credentials for a lot of internal systems”, with the following explicitly listed:

  • SonarQube
  • Creators’ Cloud
  • Sony’s certificates
  • A device emulator for generating licences
  • Qasop security
  • Incident response policies, and more.

Sony has said it is investigating the incident and that it has no further comment at this time, according to reporting from Security Week. Cyber Security Connect has reached out to Sony on multiple occasions, but the company has declined to respond, nor has it made any mention of the alleged leak on its main corporate site.

Ransomed.vc made its original claim earlier this week, saying: “We have successfully compromissed [sic] all of sony systems. We wont ransom them! we will sell the data. due to sony not wanting to pay.”

Some limited proof-of-hack material was posted, seeming to be from an internal test environment. Now, following the clear web leak, Ransomed.vc’s darknet leak site has been updated.

“PARTIAL DATABASE HAS BEEN LEAKED!” the site said alongside a link to an archive of the same name as that posted by MajorNelson overnight.

David Hollingworth

David Hollingworth

David Hollingworth has been writing about technology for over 20 years, and has worked for a range of print and online titles in his career. He is enjoying getting to grips with cyber security, especially when it lets him talk about Lego.

cd intro podcast

Introducing Cyber Daily, the new name for Cyber Security Connect

Click here to learn all about it
newsletter
cyber daily subscribe
Be the first to hear the latest developments in the cyber industry.