Sony halts production of rootkit USB sticks

Investigating security concerns

Tom Sanders in California

Sony has ceased production of three Microvault USB memory key models that pose a potential security risk to Windows computers, a company spokesperson told vnunet.com.

The spokesperson said that the electronics manufacturer stopped shipments of the product earlier this month. Rather than citing security concerns, however, the company phased out the product line because of "modest sales".

Advertisement

Sony said that it is currently investigating the security issues. Pending the investigation, it is unable to say whether it plans to issue a recall.

The three discontinued models are the USM-128C, USM-256F and USM-512FL, each of which has an embedded fingerprint reader.

Sony could not verify the number of devices that have been distributed, but said that a "limited" number had been sold worldwide over the past few years.

Security vendor F-Secure warned earlier this week that malware writers could abuse a feature of the software that shipped with the device to hide malicious applications from the user and security software.

The software, developed by Taiwan's FineArt Technology, operates in a way that resembles a rootkit.

In combination with the FineArt software, the fingerprint reader controls access to the data stored on the device.

The software stores information about authorised fingerprints in a way that is invisible to the end user as well as to some antivirus software.

Although this helps in safeguarding the integrity of the fingerprint data, the folder could also provide a hiding place to viruses and other malware.

A different division of Sony was caught in a rootkit scandal two years ago. Record label Sony BMG put rootkit technology on some of its music CDs at the time in an effort to prevent illegal file sharing.

F-Secure, together with software developer Mark Russinovich, outed the label for using the technology. Sony initially denied that it posed any security concerns, but was proved wrong when malware started exploiting the rootkit functionality.

The scandal led to a government investigation and several lawsuits, the majority of which have since been settled.

  • Have your say
  • Send to a friend
  • Print
  • Digg
  • Reddit
  • Share

Tags:

Do you agree?

Further reading

Sony caught playing with rootkits again

Repeat of hidden folders offering a malware hiding place

2005

2005 Review of the Year: Sony BMG

The record label's efforts to stop online file swapping backfired big time

Sony BMG sues DRM software supplier

Former SunnComm accused of negligence and unfair business practices

Sony BMG settles rootkit case with FTC

Company to shell out up to $150 per customer

Related whitepapers

Related jobs

Most watched

eu flag

V3.co.uk weekly debrief, 6 Nov 09

This week, Europe decides what to do with illegal file sharers

Intel unveils its micro server platform

Small-enclosure systems take aim at hosting market

IT white papers

Search white papers

Top categories

Poll

Impact of Information Overload poll

Impact of Information Overload poll

What is the biggest problem your firm faces as a result of the data explosion?

View poll results

Advertisement

Advertisement

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Spotlight

Piracy, privacy and processing power set to be hot topics for V3.co.uk Summit

Have you got a burning desire to quiz experts from...

iPhone

World's first iPhone virus surfaces

Images of 80s icon Rick Astley spell trouble

Airvana HubBub

Airvana debuts 3G femtocell for offices

HubBub improves indoor network coverage for businesses

shopping key

E-commerce on brink of SaaS revolution

Figleaves founder argues platform-as-a-service vendor will emerge to shake up...

Primary Navigation