Playstation website infiltrated, hackers stealing credit card details

Posted Jul 2, 2008 at 10:25AM by QJ Staff Listed in: News Tags: malware, Sony, Sophos
Ó


Sophos says the PlayStation website may be compromised - Image 1IT security firm Sophos recently released a news article stating that the PlayStation website has been infiltrated by hackers. Hackers are reportedly using the infiltration to try and steal important credit card details from users.

Experts from SophosLabs discovered that hackers were successfully able to use an SQL injection attack to plant unauthorized code into pages promoting Singstar Pop and God of War.

As of the writing of the news release, it seems the attack attempts to dupe people into thinking there's a host of viruses on their computer, and subsequently scaring them into "buying" antivirus software. Sophos does warn, however, that the attackers could inject a more malicious payload into the system.

Notes Graham Cluley, senior technology consultant for Sophos,

There are millions of video game lovers around the world, many of whom will visit Sony's PlayStation website regularly to find out more about the latest console games. Most would never expect that surfing to a website like this could potentially infect them with malware.... It is essential that all websites, especially when they are high profile like this or receiving a large level of traffic, have been properly hardened to prevent hackers from injecting malicious code on to what should be legitimate webpages.



Via Sophos

 
 
 

Comments [refresh]

by arnookie - 2008-07-02 05:27
» Sony oh what a mess

Sony oh what a mess!

Hope you sort is quick!!!

by 73N5H1 - 2008-07-02 05:44
» oops.. I have viruses... maybe I'll buy this software

Anyone dumb enough to fall for something like this deserves to have their credit card information stolen...

by majorbb100 - 2008-07-02 06:06
» not really

no one deserves it.

by 73N5H1 - 2008-07-02 06:16
» I think they do

I have little tolerance for stupidity...

by roddollente - 2008-07-02 06:29
by dbzking - 2008-07-02 06:33
» hah

only losers will do something like that

by frank_the_bunny - 2008-07-02 06:48
» haha

"I have little tolerance for stupidity... "



lmao XD

by ultimax - 2008-07-02 07:17
» ...

Intelligence can't be changed. Arrogant people like you though, can. What makes you any better than someone not as smart as you anyhow? It's entirely to do with exposure as a child and genes. It's not too different from racism.



On that note, how is intelligence related to knowing how to use a computer?



I mean, someone as smart as Einstein could just as well fall for this trick if they had no previous experience with a Compootah.



Looks like you're the stupid one here for not being able to figure that one simple thing out.



Now think again. Does someone deserve to be robbed just because their mama didn't buy their neeky lil kids laptops as they hit their second birthday?

by Justingraziano - 2008-07-02 07:44
» PlayStation Store on PS3?

Does this affect PlayStation Store on the PS3?

by failtorespond - 2008-07-02 08:06
» hmm

they should have given people more to do with some better firmware upgrades lol.

by hush404 - 2008-07-02 08:55
» Umm

Thats misleading as ****!



From what the article says; you've got to be surfing the site on a windows machine and be dumb enuff to fall for the fake "OMG YOU HAVE A VIRUS" thing in order for them to get any further than showing you a dumb image.



Meaning. They have no access to any servers that deal with credit cards (think PSN) or anything outside of an exploit they've used to trap people (if they're truely dumb enough to believe it).

by Knivez7 - 2008-07-02 09:08
» ultimax

Let me rephrase that for 73N5H1, who is most likely somebody who feels the same way I do. "I have little tolerance for a lack of common sense."



There does that work better? I agree, a person's intelligence isn't completely at fault here. It's their lack of common sense that allows these people to become pray to those who know how to exploit such a weakness.



I for one am all for natural selection, and I too believe the victims all deserved their credit card information stolen.

by ChaosX6 - 2008-07-02 09:29
» n00bs-

you never buy software popups.....what idiots....

by akadewboy - 2008-07-02 09:43
» Probably not

You shouldn't worry, as long as you aren't dumb enough to buy things from random popups.

by NarooN - 2008-07-02 09:48
» wow.

Damn no-life hackers. They really deserve to be horrendously tortured.

by scott1234 - 2008-07-02 10:18
» .

what the hell is wrong with people

jesus make your own money

by Bense - 2008-07-02 11:01
» many very smart people aren't internet geeks.

many physicists, mathematicians, doctors, chemical engineers, bio-chemical engineers who are 100000000x smarter than you'll ever be, don't know how to use the internet. Why? Because they have better and more important things to do.



Dumbass.

by Killa B - 2008-07-02 11:29
» What the hell?

The guys that did this fail at life. They get a SQL injection to work on the Playstation site... and they use it to put up one of those virus popups that not even retards fall for anymore?



I'm not really familiar with the Playstation site, since I've never used it, but wouldn't it be a better idea to try and steal accounts and passwords? They should have just redirected to a fake login page.

by Hekynn - 2008-07-02 11:35
» ouch

ouch that hurts Sony I hope you catch those guys.

by Binary - 2008-07-02 12:11
» I think I just got owned

No wonder my bill is under -$3,000

by 93pauott - 2008-07-02 12:33
» so...

why would anyone exept the hacker themselves deserve to loss their money?

by 93pauott - 2008-07-02 12:35
» hai!

(this joke contains fail)



i'm one of the haxxorz!

by ultimax - 2008-07-02 13:11
» ...

Knivez7, did you seriousley just use "natural selection" and "credit card information" in the same sentence, right after babbling on about common sense?

by Sanzee - 2008-07-02 13:55
» Dang

How could they hack into sony's website? Well, hopefully karma comes back to them. But sony is already losing tons of money. I could be wrong but doesn't it cost sony more to produce a PS3 console than they actually sale it for? As I said, I could be wrong.



I know alot of sony's so-called "loyal fans" bash out at ppl who say one wrong thing, but I know many of you are actually mature too so please answer my question with as little hatred as possible. Thank you.

by FreePlay - 2008-07-02 14:28
» ...

"What makes you any better than someone not as smart as you anyhow?"



They're not as smart as me.

by Binary - 2008-07-02 18:39
» ...

FBI is now looking into this.

by sonofken - 2008-07-02 20:32
» picture on jump

what is the point of even having images on this site, when you click them, they stay the same size, so you cant view them, fix this qj!

by sickofitall - 2008-07-03 05:15
» "Anyone dumb enough to fall for something like this deserves..."

This is a stupid thing to say. Everybody cannot possibly know everything that scam artists are planning to do and are ready for it. Things like this happen all the time, and you should not blaim the victims. You should be blaiming the people doing the scamming.



People prey on others all the time, but do you really think all victims deserve it?

by 93pauott - 2008-07-03 11:54
» ..

go back to your cave you fat honky tonky xbox fanboy.

by ultimax - 2008-07-03 14:14
» Freeplay

Yeah, thanks for stating the obvious; you are indeed smarter than those who aren't as smart as you. 0_o

by Mister Common Sense - 2008-07-06 23:54
» .

Anyone with common sense would not buy antivirus software from a pop up.

Therefore, anyone who fell for this is a dumbass and deserves it.

The idiots responsible should get the death penalty, however.

Add comment

Security code
Refresh

Add QJ.NET
Add to My Yahoo!
Google Reader Subscribe with Bloglines
Add  to your Kinja digest Subscribe in NewsGator Online
Subscribe with Pluck RSS reader Add 'www.qj.net' to Newsburst from CNET News.com
Subscribe with SearchFox RSS del.icio.us www.qj.net
Add to Technorati Favorite! Add to My AOL
furl! it Stumble for Treehugger!