Samsung installs Keylogger on its Laptop Computers - False Alarm

Story:
https://www.networkworld.com/newsletters/sec/2011/032811sec2.html

 

Re: Samsung installs Keylogger on its Laptop Computers

@ Dermot7

Good find

Wonder why they use a KL that was last updated on Sep 13, 2005 ? Also it's not free = Shareware $23. Maybe they got a discount

http://www.brothersoft.com/starlogger-26184.html



The publisher is de Willebois Consulting, but there is NO mention of it on their www ? - http://www.willebois.nl

Anyway, SHAME on Samsung this is outrageous, i almost can't believe it How on earth could a big company like them expect to have it undiscovered ? I don't see how they will be able to provide ANY legit reason for doing this, only lame excuses. They deserve to be whipped for lots of $ and i hope they are.

 

Re: Samsung installs Keylogger on its Laptop Computers

Why would any manufacturer purposely place a keylogger on their laptops? If it's true, I hope it hits them hard where it hurts, future sales. Unfortunately, I think this story will not reach the general public.

 

Re: Samsung installs Keylogger on its Laptop Computers

They're going to lose money, one way (sales) or the other (lawsuits).

 

Re: Samsung installs Keylogger on its Laptop Computers

They don't mention Samsung as a 'Starlogger' customer on their site but the product itself is listed under 'Products'; Willebois Consulting link

I don't get it.
Sure, this company offers screensavers with a company logo and tailor-made software (like planning software StarPlanner for f.i. (cough) beauty parlours, nail studios and hair salons) but last time the 'StarLogger' page has been updated was in 2009. The keylogger in 2005.
This is the company contracted by Samsung? It would seem more plausible that another keylogger with the same name is being used.
Then again, they don't seem to mind installing this crap on notebooks.
Mindbogling decision if true imo...

Perhaps related to the recent South-Korean uproar about insecure consumer computers and Samsung being(/trying to be) ahead of the curve?
Wilders thread; South Korea's Zombie PC Prevention Bill to make security software mandatory link

edit;
Most scroogle links do confirm it's the Willebois Consulting product.
Emsisoft describes the company;
'De Willebois Consulting is a supplier of consultancy services on information systems. Besides the consultancy services De Willebois Consulting also designs and develops advanced software solutions. It covers the whole process starting with design followed by development and finally resulting in implementation. Its mission is to provide the best possible services and solutions to its customers by utilizing its expertise in Information Technology. It is able to develop a tailor made information system within a short period as it use ready developed software components in its developing process' link

^'Privacy class action lawsuit investigation' for the masses; link

 

Re: Samsung installs Keylogger on its Laptop Computers

They should be in jail!

 

Re: Samsung installs Keylogger on its Laptop Computers

Latest update from Samsung, posted on their official Korean language blog;

-http://www.samsungtomorrow.com/1071-

Thoughts?

 

Re: Samsung installs Keylogger on its Laptop Computers

The link above is taken from the updated article below at engadget;

-http://www.engadget.com/2011/03/31/samsung-reportedly-installing-keylogger-software-on-r525-privac/-

 

Re: Samsung installs Keylogger on its Laptop Computers

It does seem almost unbelievable.
I`m wondering if it was a one off incident where a rogue employee has been altering a batch of laptops going out....
if not, it`s mind boggling to think the company has done it wilfully.

Edit: only just read that update....that guy will be a bit embarrassed now i would imagine for not double checking

 

Re: Samsung installs Keylogger on its Laptop Computers

Is this really an official Samsung blog? (My Korean is rather poor).
According to the blog it's just one big misunderstanding due to a fp (in Vipre's detection anyway) related to the 'Microsoft's Live Application multi-language support folder' Slovenian (SL) language pack?

That does seem unlikely given the fact that Samsung employees have admitted using a keylogger, according to Mohamed Hassan who discovered the keylogger; '...reportedly, a supervisor informed Mr. Hassan (after an earlier denial) that the company did indeed install the software at the factory in order to "monitor the performance of the machine and to find out how it is being used.' Engadget article link

Meh, Engadget themselves 'retract the accussation' so I'm stepping back and taking my seat on the fence...

 

Re: Samsung installs Keylogger on its Laptop Computers

"Testing confirms Samsung keylogger rumour just a false alarm":

http://www.theregister.co.uk/2011/03/31/samsung_keylogger_rumour_debunked/

 

Re: Samsung installs Keylogger on its Laptop Computers

from http://www.theregister.co.uk/2011/03/31/samsung_keylogger_rumour_debunked/
mentioned above

First, not good for Vipre to detect this, but more important to me is that M. E. Kabay and Mohamed Hassan wrote that article after doing not nearly enough to confirm Vipre's findings. Yes, they called Samsung for a comment and they seemed to confirm it, but why would they not even look at the files in the directory mentioned? That should have told them it didn't look like Starlogger (or whatever it's called). Also, they mentioned in the article something about starlogger sending stealthy emails from the laptop. How did they come to this conclusion if there was, in fact, no keylogger installed?

IMO they should have done more to confirm the actual presence of an active keylogger before publishing that article. To me, them crying wolf just ruined any credibility they might have had for any future findings.

 

Re: Samsung installs Keylogger on its Laptop Computers

Alex Eckelberry explains: http://sunbeltblog.blogspot.com/2011/03/samsung-laptops-do-not-have-keylogger.html

 

Re: Samsung installs Keylogger on its Laptop Computers

Yet another reason not to rely on AV software for any sort of real security.

 

Re: Samsung installs Keylogger on its Laptop Computers

this is non sense on behalf of sunbelt, and their explanation is rubbish. they are using folder name detection for a little used commercial key logger, i can't believe it.

It might be a detection from the old counterspy, incorporated into vipre without any further analysis.

The reporting of keylogger was also totally irresponsible behaviour. Really not a good work.

 

Re: Samsung installs Keylogger on its Laptop Computers

So the only evidence of Samsung's keylogger is a false detection by an antivirus program..

I thought he would've at least gotten more proof before posting such allegations.

Note to self: Don't be so gullible in the future.

 

Re: Samsung installs Keylogger on its Laptop Computers

Gullible...That's what I've been blaming myself for also...
Next time a 'Hot shot' comes along and writes about in-depth analysis of his laptop using an AV and explorer while referring to a bleepingcomputer description of a 6-year old keylogger, I'll try to remember this one.

 

Re: Samsung installs Keylogger on its Laptop Computers

My Avira goes off when I go to the link

When accessing data from the URL, "http://www.networkworld.com/includes/js/_head-min.js"
a virus or unwanted program 'JS/Dekandi.A' [virus] was found.
Action taken: Blocked file
Probably a false alarm

 

Re: Samsung installs Keylogger on its Laptop Computers

I can confirm that.

Talk abt irony

 

Here, too.