|
From iPods to navigation systems, some of today's hottest gadgets are landing on store shelves with some unwanted extras from the factory — pre-installed viruses that steal passwords, open doors for hackers and make computers spew spam.
Computer users have been warned for years about virus threats from downloading opening suspicious e-mail attachments. Now they run the risk of picking up a digital infection just by plugging a new gadget into their PCs.
Recent cases reviewed by The Associated Press include some of the most widely used tech devices: iPods, digital picture frames, external hard-drives and GPS navigation gear.
In most cases, Chinese factories — where many companies have turned to keep prices low — are the source. So far, the virus problem appears to come from lax quality control — perhaps a careless worker plugging an infected music player into a factory computer used for testing — rather than organized sabotage by hackers or the Chinese factories.
It's the digital equivalent of the recent series of tainted products traced to China, including toxic toothpaste, poisonous pet food and toy trains coated in lead paint.
But sloppiness is the simplest explanation, not the only one.
If a virus is introduced at an earlier stage of production, by a corrupt employee or a hacker when software is uploaded to the gadget, then the problems could be far more serious and widespread.
Jerry Askew, a Los Angeles computer consultant, bought a new Uniek digital picture frame to surprise his 81-year-old mother for her birthday. But when he added family photos, it tried to unload a few surprises of its own.
When he plugged the frame into his Windows PC, his antivirus program alerted him to a threat. The $50 frame was infested with four viruses, including one that steals passwords.
Security experts say the malicious software is apparently being loaded at the final stage of production, when gadgets are pulled from the assembly line and plugged into a computer to make sure everything works.
If the testing computer is infected — say, by a worker who used it to charge his infected iPod — the digital germ can spread to anything else that gets plugged in. The recent infections may be accidental, but security experts say they point out an avenue of attack that could be exploited by hackers.
"We'll probably see a steady increase over time," said Zulfikar Ramzan, a computer security researcher at Symantec Corp. "The hackers are still in a bit of a testing period — they're trying to figure out if it's really worth it."
Thousands of people whose antivirus software isn't up to date may have been infected by new products without even knowing it, experts warn. And even protective software may not be enough.
In one case, digital frames contained a previously unknown bug that not only steals online gaming passwords but disables antivirus software, according to security researchers at Computer Associates.
Consumers can protect themselves from most factory-loaded infections by running an antivirus program and keeping it up to date. The software checks for known viruses and suspicious behaviors that indicate an attack by malicious code — whether from a download or a gadget attached to the PC via USB cable.
- - Summarised by the WOUGNET TechSupport team from an article by Jordan Robertson, AP Technology Writer. Find the full article here . |