McDonalds Japan Distributes Infected MP3 Players 168
Tamas Feher from Hungary writes, "Finnish antivirus vendor F-Secure reports that Mcdonalds in Japan distributed 10,000 infected MP3 players as customer prizes in a promotion with Coca-Cola. The USB sticks contained 10 free songs plus the QQPass Trojan, which is intended to steal login data. F-Secure reports that they have heard, but cannot confirm, that simply plugging the USB device into a Windows PC is sufficient to get infected. Investigation is still going on, but the mishap apparently happened in Hong Kong. Patrons nationwide are urged to quickly return their M-logoed sticks for replacement or call a 24hr hotline, if unsure." Here is the Mcdonalds Japan announcement (in Japanese, but Babelfish at Altavista handles it well).
Re:I'm lovin' it! (Score:3, Interesting)
Actually, I would have to say that fast food(and ramen shops where 500 yen can get you a huge bowl of awesome ramen) is one of the things I miss most about living in Japan. Though the beer here in Germany does help to compensate
Re:Automatic infection may be possible (Score:5, Interesting)
It seemed funny that such a simple script with such dangerous potential would be called in the same way. Is it really that hard to have the OS treat removable devices in a completely different manner (rather than the apparent "eh, just hack it together and make it work" that's there now) than read-only devices?
I always thought it'd be fun to have a USB key that autoran a batch file or VBS script that copied C:\Documents and Settings\* or C:\My Music\* to my thumb drive. "Plug and Play" turned into "Plug and take." Or, if I wasn't feeling malicious, having my thumb drive install a custom MSI of a few useful apps such as pre-configured firefox and putty on public terminals (thus saving me those precious, precious four whole steps....God I'm lazy.) But it didn't take long for me to figure out that the official answer to that was a resounding "no."
I'm very curious how the autorun is being exploited. Is it bluffing the OS into thinking the USB drive is really a CD/DVD, or is there something else afoot here?
Re:Automatic infection may be possible (Score:1, Interesting)