Slashdot Mirror
McDonalds Japan Distributes Infected MP3 Players
Tamas Feher from Hungary writes, "Finnish antivirus vendor F-Secure reports that Mcdonalds in Japan distributed 10,000 infected MP3 players as customer prizes in a promotion with Coca-Cola. The USB sticks contained 10 free songs plus the QQPass Trojan, which is intended to steal login data. F-Secure reports that they have heard, but cannot confirm, that simply plugging the USB device into a Windows PC is sufficient to get infected. Investigation is still going on, but the mishap apparently happened in Hong Kong. Patrons nationwide are urged to quickly return their M-logoed sticks for replacement or call a 24hr hotline, if unsure." Here is the Mcdonalds Japan announcement (in Japanese, but Babelfish at Altavista handles it well).
It's 'ok' to leave Ronald McDonald alone with your children but you keep him the hell away from your computer.
My work here is dung.
and a virus with that mp3?
Congratulations! You've won a year's supply of clogged arteries and a reformatted hard drive.
Crack - Free with every butt and set of boobs
...you should see the fries.
By summer it was all gone...now shesmovedon. --
2006 October 13th
//www.mcdonalds.co.jp/
Our company campaign prize "MP3 player"
In regard to virus infection
This time, the Mcdonald's Co., Ltd. corporation August, "the MP3 player (below, this prize September 29th dispatch)" of the prize in the sales promotion campaign which is executed part having been infected to the virus was ascertained.
As for this virus there is a possibility of being infected by the fact that this prize is connected to the personal computer. Therefore, in order use not to do this prize to the customer, we inform.
As factual concern rapidly and it pursues cause, in order that annoyance of the customer is stopped in minimum, you take concerning future correspondence and hurry and report.
1. Summary and condition of infection virus
The virus of Troy wooden horse type, the worm and the spy wear were discovered.
As a phenomenon, the occasion where this prize is connected to the personal computer, on that personal computer "the Chinese memo pad stands up", "message of virus inspection was made", and so on you question and 7 cases have received wooden pail communication in as of 12 days.
2. Customer correspondence
(1) the returns doing rapidly, we execute or less all notification activity in order to receive.
The @ direct call to the customer who is elected and execution of the direct mail
NotificationonA our company home page
Notification with B shop front
Notification with C newspaper medium
(2) as for this virus there is a possibility of being infected by the fact that this prize is connected to the personal computer. Therefore, in order use not to do this prize to the customer, we inform.
Thing of the personal computer where the customer who this prize is used has become in use was considered and the system which download it can receive the virus extermination software was constructed. We link the downloadsight from the MacDonaldhome page.
(3) concerning the MP3 player of the prize, making all item collect rapidly, as soon as to receive, be able to prepare you exchange with the new item.
MP3 inquiry Executive Office
Presently TEL. 03 - 5148 - 509924 hour systems
October 14th (Saturday) 9:00AM - TEL. 0120 - 221 - 04724 hour systems (October 22nd (day) to) TEL. 0120 - 221 - 0479: 00 - 21: 00 (October 23rd (month) from)
MacDonald
Home page Http:
3. Infection route of virus and cause of infection
As for this prize the marketing store corporation (Hong Kong) from it is something which is delivered. Concerning the cause of infection, presently it is in the midst of investigating. Being placed on the customer, very much, you say and do not divide, apologize deeply. As in the future similar thing does not occur, it starts strengthening company internal system more.
MP3 campaign summary
Of period: August 4th (gold) - 31 days (wood) [ prize dispatch target date: September 29th (gold) ]
Prize item: Original music entering MP3 player
The number of successful candidates: 10,000 people
Application method: At the private portable campaign sight it inputs the serial number which is stated in the drink of L size during period, challenges in the game.
Why do I get the impression that if they had included the 'other' kind of Trojan, the outrage would have been much greater?
The theory of relativity doesn't work right in Arkansas.
You should see what the FOOD does to the user's organic kernel. It pwns the entire cardiovascular system.
Slashdot Burying Stories About Slashdot Media Owned
For a new "viral marketing" scheme?
and so does wikipedia http://en.wikipedia.org/wiki/Hong_Kong
Hong Kong Special Administrative Region of the People's Republic of China apparently, so how come McDonalds Japan is getting blamed for this?
This is my sig. There are many like it but this one is mine. My sig is my best friend. It is my life.
All you guys are just nitpicking on us. This is all in good trust to make sure that the next time you visit your local McDonalds we'll be waiting for you with even more excellent service since now we'll know if you can really pay for it. And don't worry; if you pay for a double portion we'll be sure to keep the information about your financee's hidden from your wife as well! Also don't feel oblidged to give us a tip or something, we'll help ourselves to it just to make sure you won't forget.
And the really good part: because you didn't ask for this we also don't have to keep those annoying EULA's in mind and so we will sell your data to all third parties interested so that we have some way to pay for all these extra services.
We're lovin' it!
At least the McDonald's deep-fried MP3 sticks did not come with a finger.exe command.
Where were you when the voynix came?
Favorite part of the translated message:
"The virus of Troy wooden horse type"...
I never knew they had a crack team of black hats on their payroll.
... still, I guess you're okay if you're an Apple MacDonalds user.
I can see it now - a huge lawsuit, but McDonald's and Coca Cola will settle out of court. What the settlement will boil down to is $40,000,000 US for the attorneys, and a choice of supersizing their combo or a free apple pie for the victims...
Seven puppies were harmed during the making of this post.
"I can see it now - a huge lawsuit, but McDonald's and Coca Cola will settle out of court. What the settlement will boil down to is $40,000,000 US for the attorneys, and a choice of supersizing their combo or a free apple pie for the victims..."
Or they'll settle out of court for a NICE HOT CUP OF MCDONALD'S COFFEE !!!!
Where were you when the voynix came?
C'mon, man. At least RTF summary. They are clearly going to steal your login/pwd the next time you access your bank or CC site so they can do the buying for you.
"You will soon be more aware of your growing awareness." - My first recursive fortune cookie!
Getting totally pwn3d - I'm lovin in!
Last time I was in Tokyo they had the "teritama burger". Take the meat, egg, and cheese part of a susage McMuffin, pour teriyaki sauce on it, and put it on a hamburger bun. Best. Burger. Evar. I was flying back business class and I took one on the plane with me cuz it was better than the plane food.
(I would have said it was the bomb but you know how uptight those security guys are.)
"Where quality is like a dead stinking rat - you just can't miss it."
Oh wait, wrong country.
Knowledge is how to play a game, intelligence is how to win, wisdom is knowing what game to play.
Yeah, give me the Big Hack combo.
That was informative...thank you for your insight but please try no to be so verbose in th future as others would like to get in an occasional post. It's not all about you!
First a story about loss of privacy concerning personal data, now this story about Ronald taking your bank account login details? Why weren't fast food companies mentioned in 1984?
Support NYCountryLawyer RIAA vs People
What'll get you first; the rootkit, the battery fire, or the really awful music?/p?
I don't read ACs: If a post isn't worth so much as a nom de plume to its author then I wont bother either.
See point #1.
Google translated page.
*Stretches out* Okay, here goes nothing... 2006 October 13th In regard to our company MR3 player prize virus infection The Mcdonald's Co., Ltd. corporation August's recent prize promotion contained a virus in the MP3 player. It is possible that users could be infection just by connecting the prize to their PC. Therefore we ask that customers do not connect their prize MP3 player to their PC. In order to minimize customer annoyance we recommend you report the prize to us as soon as possible. 1. Summary of the Virus A Trojan Horse virus/worm/spyware was discovered on the MP3 Players. When connected to the PC the virus will cause "the Chinese memo pad stands up" (???), a message that the virus has inspected your computer and so on. 7 cases have been recieved of this virus infecting computers in the 12 days since the MP3 Players were given out. 2. Customer correspondence (1) We are informing our customers of the issue via direct calls to their homes, our companies home page, signs at our many locations and via local newspapers. (2) There is a possibility that connecting the MP3 to your computer alone is enough to cause infection, therefore we advise winners to not connect the Player to their PC.as for this virus there is a possibility of being infected by the fact that this prize is connected to the personal computer. We have also created an anti-virus and put it on our site in the downloads section. (3) concerning the MP3 player of the prize, making all item collect rapidly, as soon as to receive, be able to prepare you exchange with the new item. MP3 inquiry Executive Office Presently TEL. 03 - 5148 - 509924 hour systems October 14th (Saturday) 9:00AM - TEL. 0120 - 221 - 04724 hour systems (October 22nd (day) to) TEL. 0120 - 221 - 0479: 00 - 21: 00 (October 23rd (month) from) MacDonald Home page Http: //www.mcdonalds.co.jp/
3. Infection route of virus and cause of infection
The marketing store branch of McDonalds in Hong Kong apologizes for the infection. Concerning it's cause we are currently investigating that. We apologize again for any trouble, in the future we will strengthen our internal security so this doesn't happen again.
MP3 campaign summary
Of period: August 4th (gold) - 31 days (wood) [ prize dispatch target date: September 29th (gold) ]
Prize item: Original music entering MP3 player
The number of successful candidates: 10,000 people
Application method: At the private portable campaign sight it inputs the serial number which is stated in the drink of L size during period, challenges in the game. (???)
As you can tell I had some problems in two areas, I honestly have no idea what in the world those are supposed to mean. This is a very rough translation, coming from basicly translating a bad translation, but it's better than nothing...
There are two kinds of fool One says 'This is old therefore good' Another says 'This is new therefore better'- Dean Ing
"McDonalds: Making you AND your computer sick."
I caught the Mountain Wumpus! He gave me his treasure chest ($100) to let him go free again.
I'd be more worried about what they put into their "food".
According to the Microsoft USB FAQ, it is possible to create a USB device which Windows will Autorun. Since Microsoft doesn't include anchors within the document to allow me to link directly to the question, it is:
So, yes, it is possible to make a USB storage device trigger Autorun and run a trojan. I don't know if it's possible in this case, but it is theoretically possible to do with a USB device.
You are in a maze of twisty little relative jumps, all alike.
This seems to be an infected memory stick, not a player. That would be some serious news, by itself, if McDonalds was giving out MP3 players with meals in Japan, viros or not.
"Don't you know you're going to shock the monkey?"- Peter Gabriel
...the burgers aren't the only things at McDonalds that should be served with some serious antibiotics! NOTE: yeah, before you call me on this, I *know* that antibiotics are only good against bacteria, and don't work against virii. Then again, anyone that calls me out probably isn't susceptible to antibiotics either, as you probably need a life to be susceptible to them...
I left my wallet in El Sigundo!
"Patrons nationwide are urged to quickly return their M-logoed sticks for replacement..."
Somehow I think replacement is the least of their worries.
..then whatever McDonalds does is the least of people's worries. The users have real computer problems, which go way beyond any one-time viral threat.
As copyright owner of this comment, I authorize everyone to defeat any technological measure which limits access to it.
If you're going to take the trouble, we might as well see the line breaks:
//www.mcdonalds.co.jp/
-----------
*Stretches out* Okay, here goes nothing...
2006 October 13th
In regard to our company MR3 player prize virus infection
The Mcdonald's Co., Ltd. corporation August's recent prize promotion contained a virus in the MP3 player. It is possible that users could be infection just by connecting the prize to their PC. Therefore we ask that customers do not connect their prize MP3 player to their PC. In order to minimize customer annoyance we recommend you report the prize to us as soon as possible.
1. Summary of the Virus
A Trojan Horse virus/worm/spyware was discovered on the MP3 Players. When connected to the PC the virus will cause "the Chinese memo pad stands up" (???), a message that the virus has inspected your computer and so on. 7 cases have been recieved of this virus infecting computers in the 12 days since the MP3 Players were given out.
2. Customer correspondence
(1) We are informing our customers of the issue via direct calls to their homes, our companies home page, signs at our many locations and via local newspapers.
(2) There is a possibility that connecting the MP3 to your computer alone is enough to cause infection, therefore we advise winners to not connect the Player to their PC.as for this virus there is a possibility of being infected by the fact that this prize is connected to the personal computer. We have also created an anti-virus and put it on our site in the downloads section.
(3) concerning the MP3 player of the prize, making all item collect rapidly, as soon as to receive, be able to prepare you exchange with the new item.
MP3 inquiry Executive Office
Presently TEL. 03 - 5148 - 509924 hour systems
October 14th (Saturday) 9:00AM - TEL. 0120 - 221 - 04724 hour systems (October 22nd (day) to) TEL. 0120 - 221 - 0479: 00 - 21: 00 (October 23rd (month) from)
MacDonald
Home page Http:
3. Infection route of virus and cause of infection
The marketing store branch of McDonalds in Hong Kong apologizes for the infection. Concerning it's cause we are currently investigating that. We apologize again for any trouble, in the future we will strengthen our internal security so this doesn't happen again.
MP3 campaign summary
Of period: August 4th (gold) - 31 days (wood) [ prize dispatch target date: September 29th (gold) ]
Prize item: Original music entering MP3 player
The number of successful candidates: 10,000 people
Application method: At the private portable campaign sight it inputs the serial number which is stated in the drink of L size during period, challenges in the game. (???)
As you can tell I had some problems in two areas, I honestly have no idea what in the world those are supposed to mean. This is a very rough translation, coming from basicly translating a bad translation, but it's better than nothing...
This sig all sigs devours
...which can't possibly infect your computer.
Oh, wait...
"How to Do Nothing," kids activities, back in print!
Next week's headlines: McDonalds aquire McAfee.
Full Tilt
I can't wait for the law requirinq malign electronic life checkings (and sterelization) for all consumer electronic devices...
I have discovered a truly marvelous proof of killer sig, which this margin is too narrow to contain.
Looks to me like the RIAA is expanding onto the highest-population continent in the world.
if (QQPass instanceof DRM) {
System.out.println("Suddenly everything makes sense")
}
Help me get a new laptop - http://nocreditcard.yourgiftsfree.com/?id=3012
A new product line:
Burger, small fries, small soft drink, memory stick containing the QQPass Trojan. - The unhappy meal.
The race isn't always to the swift... but that's the way to bet!
McDonalds jingle You Deserve a Break Today done by American Idol Judge, Barry Manilow.
Do not want
Slashdot Burying Stories About Slashdot Media Owned
This looks like an accident, the incident where IO Data shipped external drives with a remote access trojan preinstalled looks like an accident.
What's to stop something like this from happening on purpose?
Let A be a Taiwanese OEM living on margins as thin as a supermodel. Let B be a spyware company that pretends its products are legitimate and bring valuable commercial notices to the end users. B is willing to pay money to get its product in front of eyeballs. Company A will take every New Taiwan Dollar (about three cents) they can get. Is A going to say no to an offer from B to preinstall B-ware on A-gadgets?
Let's not forget the more traditional method: as a former McDonalds manager, I must mention the more common way to transmit viruses (hand to money to hand to mouth) is still probably more common. And, I would say that washing your hands in those bathrooms won't necessarily clean off all germs, but rather introduce you to new ones...
Campaign prize "MP3 player"
The apology regarding virus infection it is distant the request
Customer everyone
As for our company, in this year August "GET! MP3/MP3 hits!"When we have executed campaign, it is this campaign prize, in portion of the "MP3 player", those which have been infected to the virus being included was ascertained. Truly it apologizes more deeply than true heart without excuse, application it receives in this campaign, vis-a-vis the customer who is elected.
According to the investigation of this corporation, this virus is a possibility of being infected by connecting this prize to the personal computer. Following, placing on this corporation, making all item of the MP3 player of the prize collect, rapidly from your all customers, we decided that it receives. In the next few days, being able to point to the guide of all the item exchanges vis-a-vis your all customers who are elected, it receives, consecutively, exchanges at with the gratuitous new item.
In addition, in order that damage of the customer is stopped in minimum, vis-a-vis your all customers who are elected, by the telephone individually communication after giving, the place where it faces, to the prevention of infection of virus such as guide of offer of the virus extermination software with thorough system it is existence. Furthermore, because as mentioned below we guide virus extermination method already this prize as the one for urgent measure to the customer who becomes utilization, application it receives together, the fish you say to ask.
1. Please execute "the trend flex security (TM)" of the trend micro corporation.
2. When" WORM_QQPASS.ADH" is detected after the executing, please execute extermination tool "Fix-QQPAS.exe".
3. Changing lastly, it executes the "trend flex security (TM)", verification it receives the fact that the virus is not detected, all jobs become end.
Furthermore, when reexecuting the "trend flex security (TM)", when the virus is detected,
The question please adjust to the below-mentioned executive office.
* Depending upon the environment of the customer until it completes, there are times when time is required for a while.
* Depending upon the environment of the customer there are times when warning and the like which urges un installation is indicated. In that case it is embarrassed, but please communicate to the below-mentioned executive office.
* As soon as in the future new information to enter, we inform in this home page. Please verify up-to-date information in this home page
* As for the customer of utilization please inquire Windows98 to the below-mentioned executive office.
When there is an unclear point, please communicate to the below-mentioned "MP3 inquiry executive office".
As in the future, similar thing does not occur, it starts strengthening company internal system more.
That also in the future, patronage it receives MacDonald, we ask may.
The press release regarding main case of the
MP3 inquiry executive office
To October 22nd TEL.0120-221-047 (24 hour establishment)
October 23rd ~ TEL.0120-221-047 (9: 00~21: 00 establishment)
* Name of the customer, as for private information of address and telephone number etc we do not use other than object of commodity exchange.
CLOSE
From TFTA (the fine translated announcement): "1. Summary and condition of infection virus The virus of Troy wooden horse type, the worm and the spy wear were discovered. As a phenomenon, the occasion where this prize is connected to the personal computer, on that personal computer "the Chinese memo pad stands up", "message of virus inspection was made", and so on you question and 7 cases have received wooden pail communication in as of 12 days.".
Yeah, Babelfish worked wonders there.
I caught the Mountain Wumpus! He gave me his treasure chest ($100) to let him go free again.
Did they buy these MP3 players from Sony? I mean, I still have to wonder just how...
...and I always though Mac users are safe from viruses
Interpol has identified a suspect.
They're labeled M for malicious!
In Japan virus happy meal USB into you!
Did Somebody Say McVirus? or I'm Infectin' It
I'm lovin it.
.. people do. It's sad that they'll pay nearly a quid for a few slices of apple and whatever, not caring that they can get a whole bag of apples for a quid at any market or supermarket. It's like 'There you go, little Porketta. Here's a few slices of apple - eat them up, they're good for you. Well, after you've had your Big Mac and Extra Fries.'
Mcdonalds and Sony could be having a competition.
Sony: "Ha! We infected millions of computers with a virus and they didn't even know it"
Mcdonalds: "Bah! We can infect computers too!"
Anyone up for round 2?
"Anonymous Cowards filtered. If their words aren't worth so much as a nom de plume why should I value them any mor"
Learn English before learning Latin. And yes, I am an AC because I don't want you to correct the mistake.
Am I missing something here? What on earth does Hong Kong have to do with Japan?
I wonder if this will hurt the company's sales of food, because customers will hear "virus" and think something's wrong with the fries instead of the chips.
Just don't order the Snow Crash shake.
Revive the Constitution.
McDonalds, being the fast value place, "merely installed" a trojan, probably of mediocre quality.
Sony, being a high class electronics firm, installed the rootkit that cinched Mark Russinovich's job with Microsoft.
My first Journal Entry ever, in 8 years! http://slashdot.org/journal/365947/aphelion-scifi-fantasy-horror-poetry-webzine
They steal your bank account number and then put $7,50 on each day and then appears a message that if you don't go to McDonalds and spend your 7,50 that your hard disk will be wiped. Once you are addicted they stop giving you free money...
Custom electronics and digital signage for your business: www.evcircuits.com
The other way to look at it is this. Send out a password grabber virus, wait 24 hours, and then tell people to return the memory stick. Is that a wise idea? Could it be that all the passwords are ON the stick people return?
Me and my trojaned MP3 stick
:(
Stole my password, now I'm assed out
Wish they just had the Monopoly
Game like in that other country
Ba da da da daaa
I'm hatin' it
https://www.eff.org/https-everywhere
Where is the liability for McDonalds? If they distributed burgers containing viruses their asses would be sued up and down the fry machine.
Cardiovascular disease, diabetes mellitus, and malware! Where do I sign up?
If you can read this sig, you're too close.
We have determined that a portion of the MP3 Players distributed in August as part of a special promotion have been compromised by virii. This virus is capable of infecting a computer when the Player is connected. We strongly advise that customers not connect these players to their computers. We promise to promptly investigate what caused this to happen and do everything possible to minimize damage to our customers, and will keep you apprised of any changes.
1. Symptoms of Virus Infection
We have found Trojan horse viruses, worms, and spyware. As of the 12th [of October], we have received 7 reports from customers stating that "Notepad pops up with Chinese written in it", "A virus was detected", etc immediately upon connecting the MP3 player to the computer.
2. Customer Support
We have established the following to implement a swift recall of the infected promotional goods:
1) We are directly contacting customers who won the player via phone and email
2) We published information concerning the vulnerability on our website [link in Japanese: http://www.mcdonalds.co.jp/%5D
3) We released information concerning the vulnerability though our franchises
4) We have taken out several newspaper advertisements to advise the public about the vulnerability
2) This virus is capable of infecting a computer when the Player is connected. We strongly advise that customers not connect these players to their computers. We have prepared virus removal software for customers who have already exposed their computers. A link can be found on the McDonalds home page. [see above, in Japanese]
3) We are recalling all infected players immediately. They will be exchanged [for a non-infected player, presumably] as soon as arrangements can be made to do so.
[Snip of contact info]
3. How We Came To Be Compromised
These players were procured through Marketing Store, Co. [n.b. I'm unsure whether they are Inc., Co., LLC. or what have you] of Hong Kong. We are in the process of investigating how they came to be compromised. We apologize to our customers for this incident. [n.b. Think groveling apology, although not unusually so in this sort of context in Japan.] We will strengthen our internal quality control practices to ensure this sort of thing does not affect our customers again.
MP3 Campaign Summary
Period: August 4th (Friday) through 31st (Thursday) (Prizes dispatched approximately September 29th, Friday)
Prize item: MP3 player containing original music
Prizes awarded: 10,000
Application method: L-sized [n.b. Large, although it sure doesn't feel like it when you're drinking one!] drinks purchased during the promotional period had serial numbers. Customers could input these on a special site designed for use by mobile phones. A portion of the serial numbers had been designated as winners.
Help poke pirates in the eyepatch, arr.
All Your Big Macs Are Belong To Me!!!
Or so I am told.
:-) ).
In Mexican Spanish, the machine is called "aspiradora" (which implicies breathing
IANAL but write like a drunk one.
Beanie Babies with my next Babelfish translation?! Sweet! "Stopping the work of the translator, you will gather the lovely doll!" (Oh will I ever!)
Help poke pirates in the eyepatch, arr.