Malware Distribution Through Physical Media a Growing Concern
twitter brings us a story about the increasing number of digital devices reaching consumers with malware already installed. In this case, digital photo frames from three different Sam's Club stores were found to contain the same type of malicious code. We discussed a similar problem with iPods a while back, as well as a more recent situation with Maxtor hard drives. Quoting the Register:
"While a compromise at the manufacturer is the most likely scenario, ISC's Sachs also pointed to retailers as a possible point of infection. Returned products, which could have been infected by the consumer, are frequently put back on the shelf, if they are in sale-able condition, and attackers could take advantage of a store's poor digital hygiene, he said. 'Trying to (infect a product) all the way back at the factory — getting it through all the checks and balances — would be pretty hard to do,' he said. 'But doing it at the store, where there might be loose return policies, and (where) they put it back on the shelf - you are not going to get a million infections, but you might get a person from an investment bank next door.'"
I can't find the "Mac's don't have viruses because no one writes them for macs" "wow, you can't even get people to write viruses for your OS." "yeah, i cry myself to sleep a lot." cartoon.
I know what you mean. Writing a Virus for Windows is extremely complicated given its closed source proprietary nature. Windows users are very diligent on protecting their systems with scanners and always purchase software from a trusting source. Its rare you hear of a Windows infection. Those Linux users need to get with the program if they ever want to gain the desktop.
I see your informative link, and raise you a pithy comment.
Digital devices reaching consumers with malware already installed?
Computers have been shipping with Microsoft products preinstalled for some time, I believe.
The stupidest thing is Windows being configured by default to restart for updates after the user doesn't respond for some very short amount of time...
grrrr...this one bit me at work again last week. I was in the middle of a big project and had probably half a dozen windows open. I cannot imagine why MS thought this was a good idea. Can I turn it off?
There is nothing so powerful as an idea whose time has come.
I've always taken that more as a joke since most AV programs make the computer act as if they had a virus, so really what's the difference.
Malware being shipped with hardware is hardly news. It is the common practice of computer vendors who ship their hardware with Windows pre-installed.
Colorless green Cthulhu waits dreaming furiously.