Computerworld
Quick Menu
Search



Ads by TechWords

See your link here


Subscribe to our e-mail newsletters
For more info on a specific newsletter, click the title. Details will be displayed in a new window.
Data Management
Storage
Computerworld Daily News (First Look and Wrap-Up)
Computerworld Blogs Newsletter
The Weekly Top 10
More E-Mail Newsletters 
Computerworld 2007Subscribe to Computerworld
40 years of the most authoritative source of news and information for IT leaders.

Update: Maxtor drives contain password-stealing Trojans

Seagate confirms infection during drive assembly, but says no indication of spying by Chinese authorities
 

Sign up to receive Storage Resource Alerts

November 12, 2007 (Computerworld) -- Seagate Technology LLC has shipped Maxtor disk drives that contain Trojan horses that upload data to a pair of Chinese Web sites, the Taiwanese government's security service warned this weekend.

The Investigation Bureau, a part of the Ministry of Justice that's responsible for both internal security and foreign threats, said it suspected mainland China's authorities were responsible for planting the malware on the drives at the factory. "The bureau said that the method of attack was unusual, adding that it suspected Chinese authorities were involved," a story posted by the English-language Taipei Times reported Sunday. "Sensitive information may have already been intercepted by Beijing through the two Web sites, the bureau said."

Seagate confirmed today that some Maxtor Basics 3200 drives were infected out of the box, but the company said it had no proof that the Chinese government was involved. "We discovered that a contract manufacturer had introduced a virus onto the drives during assembly," said Forrest Monroy, a Seagate spokesman, in an e-mail. "We have no indication, nor any reason to believe, that there is any government involvement in the virus issue."

According to the newspaper, about 1,800 Seagate-made drives left a Thailand facility with a pair of Trojan horses preinstalled. The two Trojans, said the Investigation Bureau, "phone home" to a pair of Web sites hosted in Beijing and report all data recorded on the compromised drive. Seagate, however, countered that the only data captured by the on-disk Trojans and sent to the Chinese Web sites were game-related passwords.

Internet records show that both sites -- www.nice8.org and www.we168.org -- were registered with XinNet.cn, one of China's largest domain registrars. Much of the registration information, however, including the contact name and mailing address, appears to be bogus.

The Investigation Bureau identified the infected drives as 500GB models and has demanded that the Taiwanese distributor pull all units from shelves. Of the 1,800 drives reportedly malware-equipped, 1,500 have been removed from the sales channel. The remainder had already been sold.

Seagate claimed that as soon as it discovered the infections, it put a "stop ship" order on all units leaving the factory. "The drives leaving the facility are [now] clean," Monroy said. But because some infected drives are in customers' hands, Seagate will post a 60-day trial version of Kaspersky Labs' antivirus software on its Web site. Users should scan any suspected Basics 3200 drive for the malware, Monroy advised. "Seagate apologizes for any inconvenience this may have caused our customers," he added.

This is not the first time that the government of mainland China -- the People's Republic of China -- has been accused of cyberspying or other computer hacks and attacks. Two months ago, it was fingered for hacks on U.S. military networks, and in May a U.S. Defense Department report said that China has beefed up its own armed forces' first-strike cyberattack capabilities.



Continued...
1 | 2 | NEXT  



Print this Story Send Us Feedback E-mail this Story Digg! Digg this Story Slashdot this Story
"Do different hard drives actually make different sounds as they grind to a horrible death? The answer is, yes. Some..." Read more...
Read more Storage posts or See all Blogs
Windows users indifferent to Microsoft patch alarm, says researcher
Tech jobs down sharply but not out
Apple yanks antivirus advice from its Web site
More top stories...
Microsoft slates 8 bug updates for year's final Patch Tuesday
De Beers tries to force spoof news Web site offline over fake ad
Microsoft confirms Yahoo's Lu to run online services
Thin as ever, the latest Air offers up to twice the storage and snappy performance.
We've got an array of economical, expensive, and just plain weird tech gifts for your friends and family.
The spam-spewing 'Srizbi' botnet that was shut down two weeks ago has been resurrected and is again under criminal control, say security researchers.
Facebook is popular and growing -- especially with criminals. Here's why they love it.
Get the latest news, reviews and more about Microsoft's newest desktop operating system
Find wage data for 50 IT job titles.
All Zones
Business Continuity Zone
The File Data Management Zone
Security Management Zone
The SAS Zone
Business Intelligence and Analytics Zone
The Enterprise Search Zone
Software as a Service Zone
The Security Zone

Ads by TechWords

See your link here
Enabling Data Centers that Are Both Automated and Dynamic
Enabling Data Centers that Are Both Automated and Dynamic
View this webcast now!
Go to the webcast 
The Business Value of Tape Storage
Download this complimentary Technology Briefing today!
(Source: Dell) Reliable. Long-lived. Portable. Affordable. Energy-stingy. These and many other attributes of tape storage are virtually assuring a continued market for tape storage, a conclusion reached by IDC and many others. Combined with other storage solutions, tape is an integral part of any data archiving strategy.
Download this executive briefing download
Brocade and the File Area Network - A Taneja Group Solution Profile
Get this white paper now!
(Source: Brocade) This Taneja Group report examines how Brocade FAN solutions are creating a stateless end-to-end file and block data infrastructure.
Download this white paper go
White Papers
Read up on the latest ideas and technologies from companies that sell hardware, software and services.
8 Things You Need to Handle Today's Network Traffic
Next-Gen Load Balancing: 3 Keys to Successful Delivery of Advanced Web Apps
Building a Reliable and Dynamic Data Center with PAN Manager by Egenera
View more whitepapers