Sony pleads innocent in latest rootkit fiasco

Sony pleads innocent in latest rootkit fiasco

Summary: McAfee has joined the ranks of those criticising Sony over the rootkit-like behaviour of a device driver used to run its Micro Vault USB drive

TOPICS: Security

Sony claims the rootkit-like behaviour of a device driver used to run its biometric Micro Vault USB drive was unintentional.

Sony Sweden representative Fredrik Fagerstedt told local press this week that sometimes even actions undertaken with "good will" can go wrong.

Fagerstedt's comments come the same day that antivirus firm McAfee joined the growing chorus of companies criticising Sony for compromising its customers' security.

McAfee reported that Taiwan's FineArt Technology, which makes encryption software for PCs and laptops, was responsible for creating the offending software.

McAfee's Aditya Kapoor and Seth Purdy wrote in a blog: "The authors apparently did not keep the security implications in mind" when designing the installation method.

Kapoor and Purdy catalogued the incident as one of the worst examples of "nasty rootkits that use blended techniques to hide or protect themselves".

Echoing F-Secure's Patrik Runald, the McAfee bloggers said the default installation path does nothing to stop malware authors from copying code to a directory of their choice and executing it in that location.

They added that another easy hack for malware authors would be to launch code from their chosen directory and add a start-up entry for the software to ensure it is hidden immediately on the PC's boot-up.

Sony Australia has not responded to multiple requests for comment.

Topic: Security

Liam Tung

About Liam Tung

Liam Tung is an Australian business technology journalist living a few too many Swedish miles north of Stockholm for his liking. He gained a bachelors degree in economics and arts (cultural studies) at Sydney's Macquarie University, but hacked (without Norse or malicious code for that matter) his way into a career as an enterprise tech, security and telecommunications journalist with ZDNet Australia. These days Liam is a full time freelance technology journalist who writes for several publications.

Kick off your day with ZDNet's daily email newsletter. It's the freshest tech news and opinion, served hot. Get it.


Log in or register to start the discussion