1. Home
  2. Computing & Technology
  3. Internet / Network Security
Network Security Blog

From Tony Bradley, CISSP-ISSAP, Former About.com Guide to Network Security

New Sony 'Rootkit' Found On USB Flash Drive

Thursday August 30, 2007
F-Secure reported on their blog that they have discovered new rootkit-like software installed on systems using the Sony MicroVault USB flash drive fingerprint reading software. The USB drive uses fingerprint scanning as a biometric security measure to authenticate the user before allowing access to the data. Including some measure of security on the USB drive seems like a reasonable idea. However, using their Blacklight rootkit detection product, F-Secure uncovered hidden folders created by the software.

You may recall that in the not-too-distant past, Sony came under fire for including rootkit-like DRM (digital rights management) software on their music CD's. Users were angry that Sony installed software without their authorization, and it was discovered that the rootkit software exposed the computer to exploits and provided a potential mechanism for attackers to leverage to hide their malware.

Sony removed the offending software and issued an apology, but apparently hasn't given up entirely on the practice. F-Secure does provide a comparison of the two rootkits in which they explain why this USB flash drive rootkit is not as serious of a threat as the previous music CD DRM rootkit was. Nevertheless, the new rootkit software can still be exploited by attackers in much the same way as the previous rootkit could. It is also yet another example of Sony showing a lack of integrity and failing to fully disclose what exactly they are installing on their customers' computers.

Comments

August 31, 2007 at 1:01 pm
(1) George says:

And I thought Sony was such a good company - I know I’m not buying any more sony products again

September 19, 2007 at 7:49 pm
(2) Spooky says:

Are you kidding? Sony has always been a crappy company. When they’re not creating rootkits to provide backdoors for script kiddies and crackers to hijack your system they’re shooting themselves in the foot selling you hardware that will only work with their proprietary media. Remember Betamax? Memorysticks? and I can’t even remember that stupid optical media that lasted like 6 months! They get greedy and sell you a camera that only takes memorysticks when everyone else uses SD?

Crappy company–crappy electronics–crappy ethics.

Leave a Comment

Line and paragraph breaks are automatic. Some HTML allowed: <a href="" title="">, <b>, <i>, <strike>

Explore Internet / Network Security
About.com Special Features

The Best Web Trends of the Decade

A look back at the best innovations, ideas and technologies over the last 10 years, More >

Family Tech Center

Stay connected and entertained with reviews on tips on the latest HDTVs, cellphones and more. More >

  1. Home
  2. Computing & Technology
  3. Internet / Network Security

©2009 About.com, a part of The New York Times Company.

All rights reserved.