This article is from the source 'guardian' and was first published or seen on . It last changed over 40 days ago and won't be checked again for changes.

You can find the current article at its original source at http://www.theguardian.com/us-news/2014/dec/19/north-korea-responsible-sony-hack-us-official

The article has changed 5 times. There is an RSS feed of changes available.

Version 3 Version 4
FBI to release more details on Sony Pictures hack Sony cyber attack linked to North Korean government hackers, FBI says
(35 minutes later)
The FBI is investigating whether China played a role in the hacking of Sony Pictures, according to officials speaking to Reuters. The FBI says it has conclusively tied North Korea to the massive hack of Sony Pictures.
More details on the investigation, which has so far centred on North Korea, are expected to come before President Obama addresses the press early on Friday afternoon, but an FBI spokeswoman told the Guardian they could not confirm reports. US authorities have been investigating the leak since the beginning of December and had previously stated in public they had been unable to establish a link with North Korea and its notorious Bureau 121 hacking unit.
The investigation into the hack found North Korea was involved, and that there may also be a Chinese link, either through collaboration with Chinese actors or the use of Chinese servers to mask the origin of the attack, a US official said. North Korea has denied involvement with the hack, carried out by a group calling itself Guardians of Peace (GOP). The group has released a slew of highly embarrassing data from Sony, demanding Sony pull the release of The Interview, a comedy starring Seth Rogen and James Franco, which depicts the assassination of North Korean leader Kim Jong-un.
The hacking group Guardians of Peace reportedly sent Sony executives a message on Thursday evening, calling the studio’s Wednesday decision to cancel the release of the controversial film The Interview “very wise”. In a statement released on Friday, the FBI said a technical analysis of the malignant software, known as malware, used in the attack had been linked to other malware “that the FBI knows North Korean actors previously developed”. There were similarities in specific lines of code, encryption algorithms, data deletion methods and compromised networks, the FBI said.
The statement was written in broken English and leaked to CNN. It continued: “Now we want you never let the movie released, distributed or leaked in any form of, for instance, DVD or piracy.” The FBI also said that the infrastructure used in the Sony attack was similar to other malicious cyber activity aimed at the US that had previously been linked directly to North Korea. For example, the FBI discovered that several internet protocol (IP) addresses associated with known North Korean infrastructure communicated with IP addresses that were hardcoded into the data deletion malware used in this attack.
The tools used in the Sony attack also had similarities to a cyber attack in March 2013 aimed at South Korean banks and media outlets, which was carried out by North Korea.
“We are deeply concerned about the destructive nature of this attack on a private sector entity and the ordinary citizens who worked there. Further, North Korea’s attack on SPE [Sony Pictures Entertainment] reaffirms that cyber threats pose one of the gravest national security dangers to the United States,” the FBI said in a statement.
“North Korea’s actions were intended to inflict significant harm on a US business and suppress the right of American citizens to express themselves. Such acts of intimidation fall outside the bounds of acceptable state behavior. The FBI takes seriously any attempt – whether through cyber-enabled means, threats of violence, or otherwise – to undermine the economic and social prosperity of our citizens.”
Pressure for action mounted as secretary of Homeland Security Jeh Johnson said: “The cyber attack against Sony Pictures Entertainment was not just an attack against a company and its employees. It was also an attack on our freedom of expression and way of life.”
GOP reportedly sent Sony executives a message on Thursday evening, calling the studio’s Wednesday decision to cancel the release of the controversial film The Interview “very wise”.
The statement was written in broken English and leaked to CNN. It continued: “Now we want you never let the movie released, distributed or leaked in any form of, for instance, DVD or piracy.
“And we want everything related to the movie, including its trailers, as well as its full version down from any website hosting them immediately.”“And we want everything related to the movie, including its trailers, as well as its full version down from any website hosting them immediately.”
Sony did not immediately respond to a request for comment from the Guardian.Sony did not immediately respond to a request for comment from the Guardian.
Reuters had quoted anonymous federal law enforcement officials saying the hack may have been a collaboration between North Korean and Chinese hackers or that servers in China could have been used to disguise the origins of the attack. But the FBI’s formal statement made no mention of China.
The announcement comes hours before an end-of-year presidential press conference where President Obama is expected to comment on the matter for the first time.
On Thursday the White House described the hack as a “serious national security matter” and said it was considering a proportional response but stopped short of blaming North Korea.
Senator John McCain, the incoming chairman of the Senate Armed Services Committee responsible for the funding and oversight of the department of defense, described the hack as an “act of war”.
“This is the greatest blow to free speech that I’ve seen in my lifetime probably,” McCain told Arizona radio station KFYI 550 on Friday morning, “We have to respond in kind. We have lots of capability in cyber and we ought to start cranking that up.”
McCain pledged on Thursday to strengthen oversight of the Obama administration’s cyber security program and blasted the president’s record on the issue.
Any involvement by China could escalate an already politically explosive situation. In May, the Justice Department indicted five Chinese military officers, alleging that they had hacked into US companies in order to steal trade secrets. Among the companies targeted were Alcoa and US Steel.Any involvement by China could escalate an already politically explosive situation. In May, the Justice Department indicted five Chinese military officers, alleging that they had hacked into US companies in order to steal trade secrets. Among the companies targeted were Alcoa and US Steel.
The indictment drew a furious response from Chinese officials, who said the charges were “based on fabricated facts” and “grossly” violated “the basic norms governing international relations”. China suspended participation in a US-China working group on cybersecurity.The indictment drew a furious response from Chinese officials, who said the charges were “based on fabricated facts” and “grossly” violated “the basic norms governing international relations”. China suspended participation in a US-China working group on cybersecurity.
The FBI has been looking into the Sony hacking scandal since the beginning of December, and had previously stated in public they had been unable to establish a link with North Korea and its notorious Bureau 121 hacking unit.The FBI has been looking into the Sony hacking scandal since the beginning of December, and had previously stated in public they had been unable to establish a link with North Korea and its notorious Bureau 121 hacking unit.
But anonymous federal law enforcement officials told various media outlets over the past 48 hours that a link between the hack and North Korea had been established.But anonymous federal law enforcement officials told various media outlets over the past 48 hours that a link between the hack and North Korea had been established.
On Thursday, the White House stopped short of blaming North Korea, but described the hack as “a serious national security matter” and said it was considering a proportional response.
Sony has been left reeling from the November attack, after thousands of confidential documents, including employee social security numbers, personal emails, unreleased films and executive pay were published online.Sony has been left reeling from the November attack, after thousands of confidential documents, including employee social security numbers, personal emails, unreleased films and executive pay were published online.
Guardians of Peace demanded that Sony Pictures pull the release of The Interview, a comedy starring Seth Rogen and James Franco, which depicts the assassination of North Korean leader Kim Jong-un.
On Wednesday, Sony cancelled the film’s release after threats were made against cinemagoers and major US theater groups.On Wednesday, Sony cancelled the film’s release after threats were made against cinemagoers and major US theater groups.
Eddie Schwartz, president of White Ops, a cyber security specialist, said many hacks leave a digital “fingerprint” that could allow the authorities to identify the culprit.Eddie Schwartz, president of White Ops, a cyber security specialist, said many hacks leave a digital “fingerprint” that could allow the authorities to identify the culprit.
Investigators will begin by looking at the malware, the software used by the hackers and then look at the next moves they made. “Different groups have different patterns of activity that they take on once they enter a system. Those patterns are like a fingerprint, almost like a playbook. You’ll see that they go after certain servers first, that they conduct operations in a certain way.”Investigators will begin by looking at the malware, the software used by the hackers and then look at the next moves they made. “Different groups have different patterns of activity that they take on once they enter a system. Those patterns are like a fingerprint, almost like a playbook. You’ll see that they go after certain servers first, that they conduct operations in a certain way.”
Depending on the amount of information Sony has been able to gather, investigators will be able to build a profile of the hack and compare it to past attacks, said Schwartz. He said there was only a “small universe of teams” capable of pulling off a hack as large as this.Depending on the amount of information Sony has been able to gather, investigators will be able to build a profile of the hack and compare it to past attacks, said Schwartz. He said there was only a “small universe of teams” capable of pulling off a hack as large as this.
Schwartz said North Korea was capable of pulling off the Sony hack, but that in past cases third parties had been shown to be responsible, and it was unclear who had commissioned them.Schwartz said North Korea was capable of pulling off the Sony hack, but that in past cases third parties had been shown to be responsible, and it was unclear who had commissioned them.