8 December 2014
PA Consulting Group’s Tony Reeves, an IT security expert, is quoted in an article in SC Magazine, which looks at claims of hacking relating to Sony's PlayStation Network.
Tony explains that the attack - which mainly affected North American users - was a way of generating publicity for the hackers, but praised Sony's response. He says: “Most organisations have actions in place to respond against DDoS, and it seems that Sony implemented its response quickly once it had been reported.
“Whilst annoying for users, and certainly unlikely to win any support for the group causing the disruption, these attacks are a quick way of generating publicity. In this case, no loss of data has been reported nor has any information been stolen. However, DDoS attacks have been used previously to mask more serious hacking attempts.”
Tony added that Lizard Squad were mainly doing these attacks for ‘fits and giggles' and pointed to the group's social media accounts, where it actively asked followers who it should attack: “This was just disruption because they can, and for the publicity, which unfortunately they got,” he said, adding that the attack came during an event celebrating Sony's games 20th anniversary.
Tony continued that it was unlikely to have any connection with a recent Sony Pictures hack, something he said ‘looks even more organised' than the breach in 2011. Tony pointed out that Sony has improved its incident response: “Their response in 2011 took a couple of weeks, but now they're responding in 24 hours and getting lawyers and the FBI involved.”