Hackers entered Sony’s network through phishing emails

The American security firm Cylance claims that the hackers who attacked Sony Pictures Entertainment managed to gain access to the company’s network by sending phishing emails. The emails appeared to come from Apple.

A Cylance employee tells Politico that a database of email files from Sony Pictures Entertainment indicates that the attackers sent phishing emails to film studio staff, including the CEO. These emails appeared to be from Apple. The messages asked to visit a website to reset the Apple ID, otherwise the account would be closed.

Based on the entered passwords and LinkedIn profiles, the attackers could have gained access to Sony Pictures’ systems, although that is partly speculation. What is clear is that the attackers used hard-coded passwords in their malware, suggesting that they somehow hijacked them from employees.

Hackers group GOP claimed the hack at Sony Pictures Entertainment in December and published company details. North Korea is believed to be behind the hack, according to the FBI. WikiLeaks republished the company data.