Feeds

Hardware biz issued trojan-laced drivers, says researcher

Razer burn

Protecting against web application threats using SSL

A maker of hardware for computer gamers has taken its support site offline following a report that it was surreptitiously distributing malware on its downloads section.

Carlsbad, California-based Razer took the precautionary move after Rik Ferguson, a senior security adviser in Europe with anti-virus firm Trend Micro, warned users could be at risk.

"A large amount of the device drivers offered for download at the Razer support site were infected with a Trojan," Ferguson wrote Monday. "It is unclear how long the problem has been ongoing, so in the meantime, if you downloaded anything from Razer recently, head over to HouseCall and run a full system scan and clean up if necessary."

Razer spokesman Heathcliff Hatcher said company officials weren't immediately able to confirm Ferguson's report, but decided to temporarily close the support site out of an abundance of caution.

"We're still investigating," he told The Register. "We've taken the support site down as a precaution to our customers. We are definitely giving it its due weight. It's a very serious concern for the company, and that's why we've gone ahead and taken the support site down."

According to Ferguson, the trojan was activated when users clicked on a link used to download drivers from the website. A recent analysis by VirusTotal shows the malware is detected by just seven of the 41 major AV products. The trojan then caused users to download a file named usbctl.exe, which installed another piece of malware known as WORM.ASPXOR.AB in a computer's system directory.

Ferguson said he was still awaiting a more thorough analysis from Trend Micro labs about exactly what the malware does. He said that based on a quick search of gaming forums, it appeared the attacks began in the past 24 to 36 hours. ®

Reducing the cost and complexity of web vulnerability management

More from The Register

next story
Spies would need SUPER POWERS to tap undersea cables
Why mess with armoured 10kV cables when land-based, and legal, snoop tools are easier?
Early result from Scots indyref vote? NAW, Jimmy - it's a SCAM
Anyone claiming to know before tomorrow is telling porkies
Apple Pay is a tidy payday for Apple with 0.15% cut, sources say
Cupertino slurps 15 cents from every $100 purchase
Israeli spies rebel over mass-snooping on innocent Palestinians
'Disciplinary treatment will be sharp and clear' vow spy-chiefs
YouTube, Amazon and Yahoo! caught in malvertising mess
Cisco says 'Kyle and Stan' attack is spreading through compromised ad networks
Hackers pop Brazil newspaper to root home routers
Step One: try default passwords. Step Two: Repeat Step One until success
China hacked US Army transport orgs TWENTY TIMES in ONE YEAR
FBI et al knew of nine hacks - but didn't tell TRANSCOM
Microsoft to patch ASP.NET mess even if you don't
We know what's good for you, because we made the mess says Redmond
prev story

Whitepapers

Providing a secure and efficient Helpdesk
A single remote control platform for user support is be key to providing an efficient helpdesk. Retain full control over the way in which screen and keystroke data is transmitted.
WIN a very cool portable ZX Spectrum
Win a one-off portable Spectrum built by legendary hardware hacker Ben Heck
Storage capacity and performance optimization at Mizuno USA
Mizuno USA turn to Tegile storage technology to solve both their SAN and backup issues.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Security and trust: The backbone of doing business over the internet
Explores the current state of website security and the contributions Symantec is making to help organizations protect critical data and build trust with customers.