The Channel logo
The Channel uses cookies. Find out more.

News

By | John Leyden 12th November 2007 20:17

Chinese Trojan on Maxtor HDDs spooks Taiwan

Ghost in the machine

Sponsored: Creating the Storage Advantage

Confirmation that a Maxtor hard disk drive was infected with a Trojan by a manufacturing sub-contractor in China is spooking Taiwanese authorities, one of the countries where examples of the infected kit have begun to appear.

As first reported by El Reg in September a pre-installed Trojan named AutoRun-AH was discovered by Kaspersky Labs on Maxtor 3200 external hard drives sold in the Netherlands. Maxtor is owned Seagate. Initially, Seagate expressed skepticism about the reports.

But following a subsequent investigation the firm confirmed that an unspecified number of Maxtor Basics Personal Storage 3200 drives sold after August 2007 were indeed contaminated by malware during the manufacturing process. It traced the problem to an unnamed sub-contractor in China.

AutoRun-AH is a Trojan that searches for passwords to online games and sends them to a server located in China. It also disables anti-virus software.

Seagate is on the case, it says. It "quickly put a stop ship to units leaving the facility as soon as the company learned of the probable infection. All units now leaving the facility in question have been cleared of the virus and units in inventory are being reworked before being released for sale. However, some affected units may have been sold to the public before the problem was detected".

Maxtor 3200 external hard drives come in a range of sizes. Some infected 500 GB versions of the product have reached Taiwan sparking a major security flap undoubtedly exacerbated by the tense political relationship between Beijing and Taipei. Many of the large capacity drives subject to the alert are used by government departments, fueling espionage fears.

Around 1,800 portable drives, produced in Thailand, were contaminated with Trojan horse malware, the Taipei Times reports. Local distie Xander International has being instructed by the Ministry of Justice to pull the products from its shelves.

Seagate has yet to respond to our requests for comment on the number of hard disks it thinks may have been infected, or where they are. ®

Sponsored: Creating the Storage Advantage

comment icon Read 16 comments on this article alert Send corrections

Opinion

Chris Mellor

VC sequence could end not with a bang, but a whimper
Sad man stares glumly over boxed contents of desk. Image via shutterstock (Baranq)

Chris Mellor

All that is storage does not beget gold
Lost

Features

Funnel of cash. Credit: via SXC – http://www.sxc.hu/profile/Leonardini
You see a diversity tickbox nightmare, I see human beings
hands waving dollar bills in the air
AWS and Salesforce match up to Ellison's hardware