[IsraelTimes] In a pattern that is becoming disturbingly common, the server hack that has nearly ruined the business of Sony Pictures was used at least twice in the past, according to an Israeli cybersecurity expert.
“There is much similarity, both in code and methods, between the malware that hit Sony — Trojan Destover\BKDR_WIPALL.A — and two other data-erasing malware — Disttrack\Shamoon — that hit Saudi company ARAMCO in 2012, and the DarkSeoul attack on South Korean banks and TV broadcasters in 2013,” Sariel Moshe of Israeli cyber-security firm CyActive wrote in a blog post.
“Even in such damaging scenarios, the cyber attacker’s tools are reused. For them, if it worked once, tweak it a bit and it will work again. The attack on Sony demonstrates quite clearly that this method works quite well.” |