Sony halts production of rootkit USB sticks

Investigating security concerns

Tom Sanders in California

Sony has ceased production of three Microvault USB memory key models that pose a potential security risk to Windows computers, a company spokesperson told vnunet.com.

The spokesperson said that the electronics manufacturer stopped shipments of the product earlier this month. Rather than citing security concerns, however, the company phased out the product line because of "modest sales".

Advertisement

Sony said that it is currently investigating the security issues. Pending the investigation, it is unable to say whether it plans to issue a recall.

The three discontinued models are the USM-128C, USM-256F and USM-512FL, each of which has an embedded fingerprint reader.

Sony could not verify the number of devices that have been distributed, but said that a "limited" number had been sold worldwide over the past few years.

Security vendor F-Secure warned earlier this week that malware writers could abuse a feature of the software that shipped with the device to hide malicious applications from the user and security software.

The software, developed by Taiwan's FineArt Technology, operates in a way that resembles a rootkit.

In combination with the FineArt software, the fingerprint reader controls access to the data stored on the device.

The software stores information about authorised fingerprints in a way that is invisible to the end user as well as to some antivirus software.

Although this helps in safeguarding the integrity of the fingerprint data, the folder could also provide a hiding place to viruses and other malware.

A different division of Sony was caught in a rootkit scandal two years ago. Record label Sony BMG put rootkit technology on some of its music CDs at the time in an effort to prevent illegal file sharing.

F-Secure, together with software developer Mark Russinovich, outed the label for using the technology. Sony initially denied that it posed any security concerns, but was proved wrong when malware started exploiting the rootkit functionality.

The scandal led to a government investigation and several lawsuits, the majority of which have since been settled.

  • Have your say
  • Send to a friend
  • Print
  • Digg
  • Reddit
  • Share

Tags:

Do you agree?

Further reading

Sony caught playing with rootkits again

Repeat of hidden folders offering a malware hiding place

2005

2005 Review of the Year: Sony BMG

The record label's efforts to stop online file swapping backfired big time

Sony BMG sues DRM software supplier

Former SunnComm accused of negligence and unfair business practices

Sony BMG settles rootkit case with FTC

Company to shell out up to $150 per customer

Related whitepapers

Related jobs

Most watched

iPhone

Video Review: iPhone 3GS

We put Apple's latest iPhone through its paces

Xperia X1

Video Review: Sony Ericsson Xperia X1

First Looks Editor Ian Williams gets hands on with the Sony Ericsson Xperia X1

IT white papers

Search white papers

Top categories

Poll

Poll: Summer smartphones

Poll: Summer smartphones

Which smartphone will you be taking to the beach this summer?

View poll results

Advertisement

Advertisement

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Spotlight

a padlock

Microsoft to plug security holes

Microsoft has given advance warning of a number of security...

Nokia handset

Top 10 articles, 10 July 09

No Nokia Android phone, ActiveX attacks and Google enters into...

Can Google beat Microsoft at its own game?

Google's announcement this week that it plans to step into...

iPhone

Video Review: iPhone 3GS

We put Apple's latest iPhone through its paces

Primary Navigation