Big mistake by Big Blue: Storwize initialisation USBs had malware

itman · May 1, 2017

The IBM arrays are okay, but the PC you used to set up the array might be in trouble

Big Blue is red-faced after shipping malware-infected initialisation USBs for its Storwize disk racks.

The company is therefore strongly suggesting users "Securely destroy the USB flash drive so that it can not be reused." Either that or wipe it, disinfect anything it touched and cross your fingers. Then download the files you need and start again.

The trojan in question goes by various names. Kaspersky's description says it's a dropper that installs itself in a temporary folder, and on execution, download other malware.

The dodgy USBs have the part number 01AC585, and may have shipped with the Storwize V3500 model 2071 01A and 10A; V3500 model 2072 12C, 24C and 2DC; V5000 model 2077 12C and 24C; and V5000 model 2078 12C and 24C.

The malware didn't land on the storage systems themselves, but rather on the laptop or desktop used to configure them: “the malicious file is copied with the initialization tool to the following temporary folder:

On Windows systems: %TMP%\initTool
Click to expand...

https://www.theregister.co.uk/2017/04/30/ibm_storwize_arrays_usb_shipped_with_malware_on_usb_drives/

ronjor · May 1, 2017

Posted here. https://www.wilderssecurity.com/thr...th-infected-initialization-usb-drives.393682/

Log in or Sign up

Big mistake by Big Blue: Storwize initialisation USBs had malware

itman Registered Member

ronjor Global Moderator

Log in or Sign up

Big mistake by Big Blue: Storwize initialisation USBs had malware

itman Registered Member

ronjor Global Moderator

Useful Searches