Phishing Site Found on a Sony Server

[steve2470]

http://www.f-secure.com/weblog/archives/00002160.html

Posted by Mikko @ 07:42 GMT

We know you're not supposed to kick somebody when they're already down… but we just found a live phishing site running on one of Sony's servers.

However, this incident has nothing to do with the Sony PSN hack.

This is the official homepage of Sony Thailand:



And here's a phishing site running under hdworld.sony.co.th, targeting an Italian credit card company:



*more at link above*

[ChromeFoundry]

1. Sony's DNS servers are hosted by

akamaitech.net

My guess is that someone was able to add a CNAME or "A" record under the Sony domain to direct traffic to another server not operated by Sony. This just makes it look like it is a Sony server.

The DNS servers are now reporting the following:
Attempt to get a DNS server for hdworld.sony.co.th failed: hdworld.sony.co.th does not exist in the DNS

I would say that this is more of a black-eye to Akamai than to Sony... but to be honest, it certainly isn't helping Sony!