Sony Pictures Investigates North Korea Link In Hack Attack

Sony Pictures Entertainment is exploring the possibility that hackers working on behalf of North Korea, perhaps operating out of China, may be behind a devastating attack that brought the studio’s network to a screeching halt earlier this week, sources familiar with the matter tell Re/code.

The timing of the attack coincides with the imminent release of “The Interview,” a Sony film that depicts a CIA plot to assassinate North Korean leader Kim Jong-Un. The nation’s ever-belligerent state propaganda outlets have threatened “merciless retaliation” against the U.S. and other nations if the film is released.

The film is a comedy and features actors Seth Rogen and James Franco as celebrity journalists who score a rare interview with the North Korean leader, played by the actor Randall Park. In the film, the journalists are enlisted by the CIA to assassinate Kim.

Sony and outside security consultants are actively exploring the theory that the hack may have been carried out by third parties operating out of China on North Korea’s behalf. The sources stress that a link to North Korea hasn’t been confirmed, but has not been ruled out, either.

The hackers, operating under the name “Guardians of Peace,” or #GOP, left an image bearing a message on the computers screens of Sony employees Monday morning. The message threatened to release sensitive data supposedly stolen from Sony servers if certain demands were not met.

On Wednesday, some of those files were said to have leaked on the Web by way of a thread on Reddit, though their veracity hasn’t been independently confirmed. The attack is said to have locked Sony Pictures employees out of their computers entirely, forcing them to resort to pen and paper to do their jobs.

Sony declined to comment beyond a statement it issued Tuesday: “Sony Pictures Entertainment experienced a system disruption, which we are working diligently to resolve.”

Similarly devastating attacks have been blamed on North Korea in the past. Last year, North Korea was said to have been behind an attack against two South Korean TV broadcast networks as well as its financial system. Employees of the two TV networks were said at the time to be left with blank computer screens. That attack also paralyzed South Korea’s network of ATM machines, preventing people from withdrawing money from their bank accounts.

More on the Sony Hack Attack

• “The Interview,” Now With 100 Percent More Franco and Rogen
• Apple Starts Streaming “The Interview,” Too (Update)
• Re/code on TV: The North Korea Edition
• Sony Works for Third Day to Restore PlayStation Network After Attack
• Internet Crashes in North Korea as 3G Networks Fail
• Sony, Google and Microsoft Will Stream “The Interview” Starting Today (Updated)
• North Korea’s Internet Connection Unstable for Second Day
• Sony Hack: What You Missed
• North Korea’s Internet Links Restored
• Sony Threatens Twitter Over Tweets Containing Stolen Emails
• North Korea’s Internet Connections Disrupted, May Be Under Attack
• China Condemns Cyber Attacks, but Says No Proof North Korea Hacked Sony
• Sony Hasn’t Decided Where to Stream “The Interview” — Meaning Not on Crackle (For Now)
• Re/code on TV: The Sony Saga Continues and Decoding the Uber Way
• You Will Get to See “The Interview,” Sony Lawyer Says
• Dr. Evil Invades SNL to Blast North Korea and Sony (Video)
• North Korea Says It Didn’t Hack Sony, Wants Joint Probe With U.S.
• President Obama Slams Sony for Canceling “The Interview”; Sony Blames Theater Owners (Updated)
• FBI Says North Korea Responsible for Sony Hack (Updated)
• Sony Pictures Hackers Demand “The Interview” Never Be Released
• For North Korea’s Cyber Army, Long-Term Target May Be Telecoms, Utility Grids
• Google Is Shocked — Shocked! — by Hollywood Studios’ Lobbying
• White House Calls Sony Cyber Attack “Serious National Security Matter”
• U.S. Links North Korea to Sony Hack Attack
• Snapchat’s Evan Spiegel “Angry” and “Devastated” Over Email Leak
• Sony Cancels Release of “The Interview” After Terrorist Threats (Update)
• Rival Studios Urge Theaters to Drop Sony’s “The Interview” Over Terror Threat
• Sony Hack Attack: Here Come the Lawsuits
• Sony Hackers Threaten Violence Over “The Interview” (Update)
• Here’s Sony Lawyer’s Letter Telling Publishers to Stop Publishing Leaks
• Sony Hack: Ripping the Veil Off Hollywood’s Secrets
• Sony Pictures Hackers Release Seventh Stolen Data Dump
• Sony Pictures Knew of Gaps in Computer Network Before Hack Attack
• Sony Pictures Tries to Disrupt Downloads of Its Stolen Files
• Cyber Attack Could Cost Sony Studio as Much as $100 Million
• Sony Brass Worried Over Kim’s Fate in “The Interview” Film, Emails Show
• Another Day, Another Sony Pictures Data Disclosure
• FBI Says There Is No North Korean Connection in Sony Hack “At This Point”
• Sony Hacker Leaks More Internal Documents, Issues Demand
• Hackers Hit Sony, Again
• Sony Says Hack Attack Is “Unprecedented”
• James Franco, Seth Rogen Spoof Sony Hack on SNL (Video)
• North Korea Denies Connection to Sony Hack, But Praises Attackers
• Attackers Threaten Sony Pictures Employees
• Malware in Sony Attack Linked to 2013 South Korean Incidents
• Sony to Officially Name North Korea as Source of Hack Attack
• Details Emerge on Malware Used in Sony Hacking Attack
• Here’s What We Know About North Korea’s Cyberwar Army
• Sony Hires Mandiant After Cyber Attack, FBI Starts Probe
• Sony Hackers Leaked Movies to File-Sharing Sites
• Sony Pictures Investigates North Korea Link In Hack Attack