Energizer bunny in hacker scare
By Hani Megerisi
Posted on 8 Mar 2010 at 13:44
The Energizer bunny has finally been stopped – by a Trojan horse.
A USB-powered battery charger, available from the company, was found to contain the Arucer.dll Trojan, according to the US Computer Emergency Readiness Team (CERT) – a branch of the country’s Homeland Security.
An attacker is able to remotely control a system, including the ability to list directories, send and receive files, and execute programs. The backdoor operates with the privileges of the logged-on user
The file was hidden in the Windows driver software provided with the Energizer DUO charger. It listens for commands on port 7777 and, once activated, could download and execute files as well as send information to a remote hacker. Mac users are unaffected.
“An attacker is able to remotely control a system, including the ability to list directories, send and receive files, and execute programs," said the CERT statement. "The backdoor operates with the privileges of the logged-on user."
The Energizer DUO charger and its software have been sold throughout Europe, Asia and the US since 2007.
Energizer said in a statement that it had discontinued the unit and was “working with both CERT and US Government officials to understand how the code was inserted in the software”. The company has warned any users who have the DUO charger to uninstall it immediately.
CERT has also advised that blocking the 7777 port on a computer will block network connectivity through the backdoor.
Is your business a social business? For helpful info and tips visit our hub.
- iPhone 6 release date, rumours, specs and features: when will the iPhone 6 come out in the UK?
- Google's self-driving cars can speed... "for safety reasons"
- Nokia Lumia 530 UK release date and price revealed
- Would you let your child sign up for a Google account?
- HTC launches One M8 for Windows... but only in the US
- 20 years of PC Pro: our greatest review mistakes
- 20 years of PC Pro: our first A-List
- Wikipedia's "right to be forgotten" protest hits the wrong note
- 3D printing hits the high street for plastic selfies
- 20 years of PC Pro: What amazed us in our first issue
- How Google Glass ruined my lunch hour
- Smartphone battery packs: can a USB power pack beat the festival battery blues?
- Windows Easy Transfer – not so "easy" in Windows 8.1
- Formula 1: what a difference virtualisation makes
- Office of the future: comfy chairs and tablets everywhere
- 10 ways to make your business more secure
- Top five VoIP mistakes
- How to add in-app purchasing to an iPhone, Android or Windows app
- Remote-control ransomware: TeamViewer and software hardball
- Why laptops with serial ports matter to the Internet of Things
- Make your mobile battery last longer
- Small steps into handling Big Data
- Nexus 5: does it really run stock Android?
- How to get broadband to a garden office
- How to write your company's IT security policy