Share

Sony hack had 'clear links' to North Korea malware, says FBI director

New York - The FBI director revealed new details on Wednesday about the stunning cyberattack against Sony Pictures Entertainment Inc., part of the Obama administration's effort to challenge persistent skepticism about whether North Korea's government was responsible for the brazen hacking.

Speaking at the International Conference on Cyber Security at Fordham University, FBI Director James Comey revealed that the hackers "got sloppy" and mistakenly sent messages directly that could be traced to IP addresses used exclusively by North Korea. Comey said the hackers had sought to use proxy computer servers, a common ploy hackers use to disguise their identities and throw investigators off their trail by hiding their true locations.

"I have very high confidence about this attribution to North Korea, as does the entire intelligence community," Comey said.

"It was a mistake by them," he said. "It made it very clear who was doing this."

North Korea has denied it was involved in the hacking.

The Associated Press reported on 20 Dec. that the FBI had discovered that computer Internet addresses known to be operated by North Korea were communicating directly with other computers used to deploy and control the hacking tools and collect the stolen Sony files. The FBI previously said its evidence also included similarities to other tools developed by North Korea in specific lines of computer code, encryption algorithms and data deletion methods.

Check out the trailer of the film The Interview, a movie that started this unfortunate incident:

Comey said the Sony attack had "clear links" to malware developed by North Korea, Comey said. The same tools were used in an attack last year on South Korean banks and media outlets, he said.

Finally, the FBI's Behavioral Analysis Unit studied statements and threats purporting to be from Guardians of Peace and compared them to other known attacks by the North Koreans, Comey said. The unit told him, "Easy for us - it's the same actors," Comey said.

Comey said the evidence should undermine persistent skepticism by some cyber experts that individual hackers or a disgruntled insider were the culprits behind a hack that sabotaged the wide release of "The Interview," a comedy about a plot to kill North Korean leader Kim Jong Un.

Image from the set of the film, The Interview:


(Image: AP)

"They don't have the facts that I have, don't see what I see," he said.

Comey said he was hesitant to reveal more about how U.S. officials learned that North Korea was the source "because it will happen again, and we have to preserve our methods and sources."

Earlier Wednesday, Director of National Intelligence James Clapper also warned North Korea will continue the attacks against American interests unless the United States "pushes back."

Clapper told the audience of government and private cybersecurity experts that he had gained insight into North Korea's anti-American mindset while dining with a top North Korean general last year when he went there to negotiate the release of two U.S. prisoners. The general would have been the one to give the green light for the attack on Sony, he said.

North Koreans "really do believe they are under siege from all directions," and "are deadly, deadly serious about affronts to the supreme leader," he said.

Earlier this week, Sony CEO Kazuo Hirai broke his silence about the attack, saying his employees were victims of a "vicious and malicious cyberattack," while adding that he's proud of them for standing against "the extortionist efforts of criminals."

We live in a world where facts and fiction get blurred
Who we choose to trust can have a profound impact on our lives. Join thousands of devoted South Africans who look to News24 to bring them news they can trust every day. As we celebrate 25 years, become a News24 subscriber as we strive to keep you informed, inspired and empowered.
Join News24 today
heading
description
username
Show Comments ()
Editorial feedback and complaints

Contact the public editor with feedback for our journalists, complaints, queries or suggestions about articles on News24.

LEARN MORE