Hackers invade site da SONY Picture

Um grupo chamado LulzSec usou um técnica de invasão conhecida e manjada a anos o bom e velho SQL injection.



Roubaram tudo que tinha na frente, entre cupons de descontos para serem usados nas compras de musicas, um milhão de contas de usuários registrados no banco de dados e outras coisas...

What’s worse is that every bit of data we took wasn’t encrypted. Sony stored over 1,000,000 passwords of its customers in plaintext, which means it’s just a matter of taking it. This is disgraceful and insecure: they were asking for it.

Hacker group LulzSec claimed to have got full access to database via a very simple SQL injection, which included information such as: passwords, email addresses, date of birth and full home addresses of over 1 million user accounts registered on the Sony Pictures website. Apart from that, some 3.5 million music coupons and around 75,000 music codes are also said to have been taken over.