FBI Accuses North Korea in Sony Hack

6 minute read
Updated: | Originally published: ;

The FBI on Friday accused the North Korean government of being behind the devastating hack on Sony Pictures Entertainment that eventually prompted it to cancel the release of The Interview, the first formal statement that the U.S. government has concluded the isolated nation is responsible for the cyberattack.

“The FBI now has enough information to conclude that the North Korean government is responsible,” the bureau said in a statement. “Though the FBI has seen a wide variety and increasing number of cyber intrusions, the destructive nature of this attack, coupled with its coercive nature, sets it apart.”

President Barack Obama, asked Friday about Sony’s decision to pull The Interview, said: “Yes, I think they made a mistake”

The FBI said it determined North Korea was responsible based on an analysis of the malware involved and its similarities to previous attacks the U.S. government has attribute to North Korean-allied hackers, including an assault on South Korean banks and media outlets in 2013. These include “similarities in specific lines of code, encryption algorithms, data deletion methods, and compromised networks,” the FBI said in its statement. According to the FBI, the malware used in the attack communicated with known North Korean computers. The FBI didn’t furnish evidence to back its assertion that North Korea was involved. North Korea has denied being behind the hack.

Read more: The 7 most outrageous things we learned from the Sony hack

Bureau investigators have been working for weeks with Sony executives and private security experts to investigate the scale and origins of the attack. For Sony, the hack has been devastating: It crippled the studio’s infrastructure, leaked sensitive documents about tens of thousands of employees and contractors, embarrassed executives and resulted in the studio’s decision to pull, The Interview, a movie whose plot centers around the assassination of North Korean leader Kim Jong Un. The film incensed the North Korean government.

Read more: 4 things every single person can learn from the Sony hack

The FBI did not say whether the attack was coordinated from within North Korea or through allies outside the hermit kingdom. The FBI said it could only provide limited information to the public to protect its sources and methods.

President Barack Obama is expected to address the incident on Friday afternoon in a White House news conference. On Thursday, White House Press Secretary Josh Earnest said the administration was treating the incident as a “serious national security matter.”

The Most Controversial Films of All Time

James Franco;Seth Rogen
The Interview, 2014 The James Franco-Seth Rogen movie hadn’t even been released when it made its greatest impact. The Interview, about two Americans on a mission to kill Kim Jong-un, has sparked conversations about the tastefulness -- or not -- of depicting the killing of a foreign head of state. But it also is widely seen as having sparked the Sony hacking scandal, as the hackers, known as the Guardians of Peace, have urged Sony not to release the film. The ripple effect of the email hack saw off-color remarks about Angelina Jolie, Aaron Sorkin, and President Obama between Sony executives go public.Columbia
'The Birth Of A Nation'
Birth of a Nation, 1915 Birth of a Nation is held in high esteem as one of the most ambitious and innovative early films. It has also, in the near-century since its release, been derided for its use of blackface to depict black men as sexually rapacious and its characterization of the KKK as heroes. Is it possible to admire a film’s technical excellence while acknowledging that its content is deeply offensive? Many film scholars, who point to Birth of a Nation as part of the foundation of modern film, believe so.Hulton Archive/Getty Images
Charles Chaplin And Jack Oakie In 'The Great Dictator'
The Great Dictator, 1940 Charlie Chaplin’s lampooning of Hitler came before the U.S. was necessarily ready to hear it -- the country hadn’t yet entered World War II yet. The Great Dictator was controversial both for its advancement of anti-Hitler rhetoric and, at the same time, its turning Hitler into a figure of comedy. United Artists/Getty Images
Ray Milland & Jane Wyman In 'The Lost Weekend'
The Lost Weekend, 1945 Billy Wilder’s frank depiction of alcoholism, anchored with a tragic performance from Ray Milland, was startling for its time. Though it won several Oscars and the Palme d’Or, it had been, before its release, far from a sure thing. The success of The Lost Weekend allowed for fuller depictions of social issues on film, even though it could be uncomfortable.Paramount/Getty Images
Sue Lyon And James Mason In 'Lolita'
Lolita, 1962 This film was perhaps the first of director Stanley Kubrick’s to directly court controversy; the poster famously asked “How did they ever make a movie of Lolita?” and the question was very much worth asking. Lolita, the novel, is a strange and surreal look at an older man’s obsession with “nymphets,” or young girls; the film manages to carry across the same subject matter, though Lolita herself was aged up to avoid outright banning.MGM/Getty Images
Bonnie And Clyde
Bonnie and Clyde, 1967 Arthur Penn’s depiction of the short, glamorous lives of two bank robbers kicked off the New Hollywood era and scandalized audiences with its over-the-top violence. Bonnie and Clyde made its subjects look like, well, movie stars -- and then killed them in a brutal, seemingly endless hail of gunfire. Silver Screen Collection/Getty Images
"A Clockwork Orange"  Hawk Films, Ltd. December 19, 1971
A Clockwork Orange, 1971 Stanley Kubrick’s adaptation of Anthony Burgess’s dystopian drama features shocking sex and violence, to the degree that the film was restricted within the U.K. for decades. Its central notion, of behavioral therapy as a force for evil, has also provoked debate since the film’s release.Michael Ochs Archives/Getty Images
Dustin Hoffman And Meryl Streep In 'Kramer vs. Karmer'
Kramer vs. Kramer, 1979 This domestic drama, starring Dustin Hoffman and Meryl Streep as a couple whose marriage ends, was upfront about the challenges of raising children and the degree to which married life could be fundamentally unsatisfying.Columbia/Getty Images
Michael Douglas And Sharon Stone In 'Basic Instinct'
Basic Instinct, 1992 This film made Sharon Stone, for a brief time, one of the most compelling movie stars on Earth. Her role as the voracious novelist and serial killer Catherine Tramell outraged gay audiences who viewed her as a homophobic stereotype, and spooked some men who were unaccustomed to Stone’s forthright sexuality. Either way, no one could stop talking about Catherine, or about Stone.TriStar/Getty Images
Nicole Kidman In 'Eyes Wide Shut'
Eyes Wide Shut, 1999 Stanley Kubrick’s final film was perfectly in keeping with his careerlong interest in provocation. Eyes Wide Shut depicts a seamy New York underworld in which just about everyone is looking for sex, power, or both. Though the film’s graphic sexuality (including a scene at an orgy) was shocking, it was its depiction of the act of love as a transaction that really unsettled audiences.Warner Brothers/Getty Images
Requiem for a Dream, 2000 Darren Aronofsky’s breakthrough film, based on the work of Hubert Selby, Jr., was unabashed in its depiction of drugs’ effects. Each of the four principal characters suffers, brutally, for his or her addiction, culminating in one character’s psychotic break, another’s amputated arm, and a third’s descent into prostitution. The film’s miserabilist outlook, graphic sex, and body-horror imagery are as effective an antidrug campaign as exists. Artisan Entertainment
Fahrenheit 9/11, 2004 The 2004 presidential election was ugly to an unprecedented degree, with attacks on John Kerry’s service from the right’s Swift Boat Veterans for truth and this documentary-length Molotov cocktail tossed at George W. Bush from director Michael Moore. Moore, who’d previously been booed at the 2003 Oscars for an anti-Bush speech, mixed together insinuations about voter fraud in Florida and ties between the Bush and bin Laden families into an antiwar statement. In its sheer provocation and palpable anger, it was the perfect film for its polarized time; the fact that it was received very differently by audiences of different political persuasions seemed somehow apt.Lionsgate
MCDPAOF NW021
The Passion of the Christ, 2004 This film, depicting the torture and eventual death of Jesus, was one of the biggest hits of all time. But it hadn’t necessarily had a clear path to acclaim; pre-release, the film was pilloried for perceived anti-Semitism. As audiences flocked over the weeks preceding Easter, some criticized director Mel Gibson for an excessively violent and sadistic vision of Jesus’s death.Newmarket
MCDBORA FE048
Borat, 2006 Sacha Baron Cohen’s depiction of a Kazakh immigrant interacting with real people stateside showed America in a terrible light; it was hilarious, painful viewing. But for months after the film’s release, questions over just how fair Borat had been to its participants persisted. And Baron Cohen’s career continued to push boundaries of taste, with subsequent movies lampooning gay men (Bruno) and Sub-Saharan African heads of state (The Dictator).20th Century Fox

White House officials have convened daily meetings to discuss the attack and to devise options for a “proportional response,” Earnest said, not ruling out an American counter-attack on North Korean systems.

“The FBI’s announcement that North Korea is responsible for the attack on Sony Pictures is confirmation of what we suspected to be the case: that cyber terrorists, bent on wreaking havoc, have violated a major company to steal personal information, company secrets and threaten the American public,” Chris Dodd, who heads the trade group Motion Picture Association of America, said in a statement. “It is a despicable, criminal act.”

See the full FBI statement:

Today, the FBI would like to provide an update on the status of our investigation into the cyber attack targeting Sony Pictures Entertainment (SPE). In late November, SPE confirmed that it was the victim of a cyber attack that destroyed systems and stole large quantities of personal and commercial data. A group calling itself the “Guardians of Peace” claimed responsibility for the attack and subsequently issued threats against SPE, its employees, and theaters that distribute its movies.

The FBI has determined that the intrusion into SPE’s network consisted of the deployment of destructive malware and the theft of proprietary information as well as employees’ personally identifiable information and confidential communications. The attacks also rendered thousands of SPE’s computers inoperable, forced SPE to take its entire computer network offline, and significantly disrupted the company’s business operations.

After discovering the intrusion into its network, SPE requested the FBI’s assistance. Since then, the FBI has been working closely with the company throughout the investigation. Sony has been a great partner in the investigation, and continues to work closely with the FBI. Sony reported this incident within hours, which is what the FBI hopes all companies will do when facing a cyber attack. Sony’s quick reporting facilitated the investigators’ ability to do their jobs, and ultimately to identify the source of these attacks.

As a result of our investigation, and in close collaboration with other U.S. Government departments and agencies, the FBI now has enough information to conclude that the North Korean government is responsible for these actions. While the need to protect sensitive sources and methods precludes us from sharing all of this information, our conclusion is based, in part, on the following:

· Technical analysis of the data deletion malware used in this attack revealed links to other malware that the FBI knows North Korean actors previously developed. For example, there were similarities in specific lines of code, encryption algorithms, data deletion methods, and compromised networks.

· The FBI also observed significant overlap between the infrastructure used in this attack and other malicious cyber activity the U.S. Government has previously linked directly to North Korea. For example, the FBI discovered that several Internet protocol (IP) addresses associated with known North Korean infrastructure communicated with IP addresses that were hardcoded into the data deletion malware used in this attack.

· Separately, the tools used in the SPE attack have similarities to a cyber attack in March of last year against South Korean banks and media outlets, which was carried out by North Korea.

We are deeply concerned about the destructive nature of this attack on a private sector entity and the ordinary citizens who worked there. Further, North Korea’s attack on SPE reaffirms that cyber threats pose one of the gravest national security dangers to the United States. Though the FBI has seen a wide variety and increasing number of cyber intrusions, the destructive nature of this attack, coupled with its coercive nature, sets it apart. North Korea’s actions were intended to inflict significant harm on a U.S. business and suppress the right of American citizens to express themselves. Such acts of intimidation fall outside the bounds of acceptable state behavior. The FBI takes seriously any attempt – whether through cyber-enabled means, threats of violence, or otherwise – to undermine the economic and social prosperity of our citizens.

The FBI stands ready to assist any U.S. company that is the victim of a destructive cyber attack or breach of confidential business information. Further, the FBI will continue to work closely with multiple departments and agencies as well as with domestic, foreign, and private sector partners who have played a critical role in our ability to trace this and other cyber threats to their source. Working together, the FBI will identify, pursue, and impose costs and consequences on individuals, groups, or nation states who use cyber means to threaten the United States or U.S. interests.

More Must-Reads from TIME

Write to Alex Altman at alex_altman@timemagazine.com