McDonalds Japan Distributes Infected MP3 Players

Tamas Feher from Hungary writes, "Finnish antivirus vendor F-Secure reports that Mcdonalds in Japan distributed 10,000 infected MP3 players as customer prizes in a promotion with Coca-Cola. The USB sticks contained 10 free songs plus the QQPass Trojan, which is intended to steal login data. F-Secure reports that they have heard, but cannot confirm, that simply plugging the USB device into a Windows PC is sufficient to get infected. Investigation is still going on, but the mishap apparently happened in Hong Kong. Patrons nationwide are urged to quickly return their M-logoed sticks for replacement or call a 24hr hotline, if unsure." Here is the Mcdonalds Japan announcement (in Japanese, but Babelfish at Altavista handles it well).

Comments

Automatic infection may be possible

[_xeno_]

According to the Microsoft USB FAQ, it is possible to create a USB device which Windows will Autorun. Since Microsoft doesn't include anchors within the document to allow me to link directly to the question, it is:

Q: What must I do to trigger Autorun on my USB storage device?
The Autorun capabilities are restricted to CD-ROM drives and fixed disk drives. If you need to make a USB storage device perform Autorun, the device must not be marked as a removable media device and the device must contain an Autorun.inf file and a startup application.

So, yes, it is possible to make a USB storage device trigger Autorun and run a trojan. I don't know if it's possible in this case, but it is theoretically possible to do with a USB device.

Re:What you say?

[brusk]

Actually it's a pretty remarkable error: it misparses a verb ending -ta (to itta, "that said") and puts the last syllable with the prefix go (from "gorenraku", "your communications") so that they together become the word "tago," a rare term for a wooden water pail.

Something is seriously wrong with Babelfish here (Google gets this passage righter): the English translation has a Hiragana "little tsu" in it, indicating that the translation system is not recognizing it as Japanese at all. Or something. Oops.