Jump to content

1-in-4 worms spread through infected USB devices


Firefox

Recommended Posts

1-in-4 worms spread through infected USB devices

Hard on the heels of a report that a USB drive was used to compromise U.S. military networks in 2008, a security company today claimed that 25% of all new worms are designed to spread through the portable storage devices.

"Much of the malware in circulation has been designed to distribute through these devices," said Luis Corrons, the technical director of PandaLabs, the research arm of Panda Security, in a statement Thursday. "Not only does it copy itself to these gadgets, but it also runs automatically when a USB device is connected to a computer, infecting the system practically transparently to the user."

While a quarter of all 2010's worms rely on USB devices to spread to other PCs, a recent Panda survey of more than 10,000 small- and medium-sized firms found that 27% of those victimized by a malware infection in the last year reported that the attack had originated with infected USB hardware, primarily flash drives.

Other devices that connect to PCs via USB, including smartphones, cameras and music players, also are a threat, added Corrons. "All these devices have memory cards or internal memories and therefore it is very easy for your cell phone, say, to be carrying a virus without your knowledge," he said.

The Stuxnet worm was one of the year's high-profile threats that relied on USB drives. In July, Stuxnet targeted PCs running software that managed large-scale industrial control systems in major manufacturing and utility companies by exploiting a then-unpatched vulnerability in Windows's shortcut files.

When users viewed the contents of an infected USB drive with a file manager like Windows Explorer, Stuxnet loaded itself onto the PC.

Microsoft issued an emergency "out-of-band" security update on Aug. 2 to plug the shortcut hole.

The USB infection vector isn't new. Two years ago, the Conficker worm made headlines worldwide after it spread using flash drives, among other avenues.

Earlier this week, U.S Deputy Defense Secretary William Lynn revealed that the U.S. Central Command's (CENTCOM) network was compromised after an infected USB drive was plugged into one of the network's PCs. CENTCOM is the military's joint regional command responsible for the Middle East, including Iraq and Afghanistan.

After Conficker's appearance, Microsoft patched Windows to fix a bug that prevented users from disabling "AutoRun," the mechanism that hackers used to automatically infect PCs when USB drives were plugged in. The company also changed AutoRun's behavior in Windows 7 to stymie such attacks.

Today, Corrons touted "USB Vaccine," a utility he said completely disables AutoRun. The tool can be downloaded from Panda's Web site; although USB Vaccine is free, users must provide their name, phone number and e-mail address before downloading.

cwlogo.JPG

Link to post
Share on other sites

I installed Panda USB Vaccine 1.0.1.4 on my XP Pro system from:

http://download.cnet.com/Panda-USB-Vaccine/3000-2239_4-10909938.html

That is the download recomended from the Panda site:

http://research.pandasecurity.com/panda-usb-and-autorun-vaccine

It never asked for my name, phone number and e-mail address before downloading nor on installation.

I tested it on 2 of my USB Flash drives and it works well.

Edit: I see sho-dan and I posted at the same time and I have been using sUBs Flash-Disinfector for a long time.

post-100-1283248577_thumb.png

Edited by YoKenny1
Link to post
Share on other sites

Why I never format USB Flash drives as NTFS

Fix and Format USB Flash Drives Jun 17 2006

http://gladiator-antivirus.com/forum/index.php?showtopic=38966

If you do you can not eject the Flash Drive safely! :)

Read what peple have to say

After pulling a USB stick out during boot of a PC, before Windoze had started, I found it was no longer readable. OK, no biggie, only non-critical data was lost. However I could NOT re-format the drive, Windows would fail at the task. I feard the stick was dead until I formatted it in a few seconds as a FAT drive using Linux!
Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.