Sony, a well-known multinational company of Japanese origin, is investigating an alleged cyber attack that would have caused the leakage of a large amount of data, 3.14 GB of which has been revealed in decompressed form according to the information available so far. The situation surrounding this incident is getting a little weird as two nefarious actors or groups are claiming responsibility, with one refuting the other.

The first group to claim responsibility for the alleged cyber attack against Sony is called RansomedVC, which according to its version managed to hack Sony’s website[punto]com and get large amounts of “data and access” to sell it. Regarding the severity of the alleged cyberattack, the group disclosed via a website hosted on the Tor network that it has “[comprometido] all Sony systems successfully. We will not allow rescue! We will sell the data because Sony does not want to pay.”

In a place where RansomedVC takes credit for the cyberattack, you can get a 2MB sample composed of PowerPoint presentations, some Java source code files, Eclipse IDE screenshots, and other resources. The group reported this to BleepingComputer succeeded in penetrating Sony’s networks and obtained a total of 260 GB of data during the attack, which he intends to sell for 2.5 million US dollars.

One detail to keep in mind is that RansomedVC considers itself more of an extortionist than a ransomware group, as they are currently still developing their encryption software, according to their own statements.

Just when it seemed clear that RansomedVC was behind the alleged cyber attack against Sony, Another malicious actor named MajorNelson came forward to claim responsibility, also refuting what RansomedVC said.. To allegedly prove his version, posted on the forum hackers a 2.4 GB compressed file that takes up 3.14 GB uncompressed.

Major Nelson said the dump he posted had “a lot credentials for Sony’s internal systems” to which files related to SonarQube, Creators Club, certificates from the company itself, device emulator for generating licenses, incident response policies, data or security-related aspects are added and other things.

BleepingComputer discovered that the RansomedVC demo contains all the files published by MajorNelson. This, in addition to many doubts about the authorship, leaves the door open to various situations, including malicious groups attacking each other or that everything is a circus run jointly or by one of the parties, without the possibility that both parties are in fact the same party dealing with different identities.

MajorNelson said in a forum post that “RansomedVC are scammers who are just trying to scam you and gain influence.. Enjoy the leak (the one with 3.14 GB of space). In addition, he criticized media outlets that mentioned RansomedVC’s initial attribution, telling them they were “too gullible” and should be ashamed of what they did.

What about Sony? The company is limited to saying through its official channels that it is investigating the matter, but it does not yet aim to go in the right direction for its interests. To Sony’s advantage, the veracity of the data is not officially confirmed at the moment, but that could change in the coming hours or days.

If confirmed, the cyber attack and the alleged leaked data would be the second large-scale attack Sony would receive in a decade, having been the victim of another cyber attack attributed to the North Korean government regime in 2014. , which led to leaks of passwords, certificates, and even movies that were about to be released. On that occasion, there was a theory that the reason was the film The Interview, produced by Sony Pictures, and that it is a comedy that does not reflect well on Kim Jong-Un, the dictator of the Asian country.