Malware-infected USB drives distributed at security conference

AusCERT's marketing manager Claire Groves confirmed the USB sticks came certified pre-owned (thanks Dan Geer) and were given out at a tutorial at the conference.

"It was only yesterday at (a) tutorial," she said. "Telstra handed out USB sticks which they didn't know were infected."

"As soon as they found out they recalled them," Groves added.

According to a SearchSecurity report, the malicious file was of the "autorun" variety, programmed to be run automatically when removable  drives are inserted into a computer.  According to estimates, about one-tenth  all malware is designed to use portable storage media, such as removable USB drives, as an attack and spread vector.

Hat tip to Drazen Drazic of the Beast or Buddha blog.

* Image credit: jacobgarcia's Flickr photostream (Creative Commons 2.0)