Sony: phishing on an official site

F-Secure reports that they have discovered phishing activity on a web site run from one of Sony’s servers.

This case of phishing which was detected on the welcome page of an official Sony website in Thailand has absolutely nothing to do with the recent problems surrounding the PlayStation Network. But it’s certainly not good news for the Japanese company which is trying to improve its image in the IT world.

F-Secure almost sounds as if they are sorry in the official release on the subject: "we know that you are not supposed to hit someone when they are down… but we just discovered a live phishing site being run from one of Sony’s servers".

The director of F-Secure’s research labs - Mikko Hypponen explains that by visiting Sony Thailand’s website, a phishing site targeting an Italian credit card company appears, with the site launched from the same domain.

Linked to a Thai site, the phishing attacks aim of ripping off Italian users means that the success rate of such a scam is probably very low. Investigations since the news broke also indicate that the problem now seems to have been resolved (F-Secure alerted Sony to the problem).

"Basically, this means that Sony was hacked, again. Although in this case the server was probably not very important", points out Mikko Hypponen.