Top executives at Sony Pictures received an email extorting money three days before the company's computer network was taken offline in a major hack.
The email message was among thousands released on Monday when the email boxes of two top Sony executives were leaked online. It was the latest release of potentially embarrassing corporate information following a major hack on the company's computer networks two weeks ago.
"We've got great damage by Sony Pictures," the message began. "The compensation for it, monetary compensation we want."
"Pay the damage, or Sony Pictures will be bombarded as a whole. You know us very well. We never wait long. You'd better behave wisely," it reads.
The email was titled "Notice to Sony Pictures Entertainment" and was sent at 9:44am PST on Nov. 21 from a Gmail account registered in the name "Frank David." It was addressed to five top Sony executives.
The IP address of the sender wasn't visible because Gmail's Web interface appears to have been used to compose the note, but there was one striking detail.
It was not signed in the name of "Guardians of Peace," the name used by hackers who claimed responsibility for the attack, but was signed "From God'sApstls." That text appeared in a different font, as if it had been cut and pasted into the message.
The God'sApstls name was found inside the malware that attacked Sony, said Symantec.
The email files of the two executives were uploaded to file-sharing sites and the Bit Torrent file-sharing network, and links to them were posted in a message that claimed to be from the same hacking group behind the Sony attack.
"We have already given our clear demand to the management team of Sony, however, they have refused to accept," said the message pointing to the files. "We are sending you our warning again."
The hackers said the email boxes belong to Steve Mosko, president of Sony Pictures Television, and Amy Pascal, co-chairman of Sony Pictures Entertainment.
The Microsoft Outlook mailbox files run to several gigabytes and apparently contain thousands of messages sent to and by both executives over several months.
A handful of the emails, seen by IDG News Service, appear to include discussions between company executives, lists of phone messages that include contact details for executives at other companies, business information, and personal messages to family members.
In one file, the most recent messages point to the email box being copied on the evening of Nov. 22. Sony first learned of the hack on November 24, when computer screens at the company showed a message telling users the network had been hacked.
The release of the email files is another blow to Sony Pictures, which is still attempting to determine who was responsible for the attack on its network. The company has been quiet on the investigation since it launched two weeks ago. Private computer security companies and the U.S. Federal Bureau of Investigations are understood to be spearheading the probe.
An initial leak of corporate data soon after the hack revealed thousands of files stolen from company servers. They included confidential business information, the salaries of Sony Pictures employees, staff medical records and computer passwords.
The company did not immediately respond to a request for comment.
Martyn Williams covers mobile telecoms, Silicon Valley and general technology breaking news for The IDG News Service. Follow Martyn on Twitter at @martyn_williams. Martyn's e-mail address is firstname.lastname@example.org