Now e-cigarettes can give you malware

Now e-cigarettes can give you malware

Many e-cigarettes can be charged over USB, either with a special cable, or by plugging the cigarette itself directly into a USB port. That might be a USB port plugged into a wall socket or the port on a computer – but, if so, that means that a cheap e-cigarette from an untrustworthy supplier gains physical access to a device.

A report on social news site Reddit suggests that at least one “vaper” has suffered the downside of trusting their cigarette manufacturer. “One particular executive had a malware infection on his computer from which the source could not be determined,” the user writes. “After all traditional means of infection were covered, IT started looking into other possibilities.

“The made in China e-cigarette had malware hardcoded into the charger, and when plugged into a computer’s USB port the malware phoned home and infected the system.”

Rik Ferguson, a security consultant for Trend Micro, says the story is entirely plausible. “Production line malware has been around for a few years, infecting photo frames, MP3 players and more,” he says. In 2008, for instance, a photo frame produced by Samsung shipped with malware on the product’s install disc.

Even more concerning is a recent proof-of-concept attack called “BadUSB”, which involves reprogramming USB devices at the hardware level. “Very widely spread USB controller chips, including those in thumb drives, have no protection from such reprogramming,” says Berlin-based firm SRLabs, which released the code.

Combine the two, says Ferguson, “and a very strong case can be made for enterprises disabling USB ports, or at least using device management to allow only authorised devices.

“For consumers it’s a case of running up-to-date anti-malware for the production line stuff and only using trusted devices to counter the threat.”

Dave Goss, of London’s Vape Emporium, says that vapers can remain safe by buying from respected manufacturers such as Aspire, KangerTech and Innokin, and by checking for “scratch checkers” on the box, which mark out authentic goods from counterfeits.

“Any electrical device that uses a USB charger could be targeted in this way, and just about every one of these electrical devices will come from China,” he adds.

In early November, figures obtained by the Press Association revealed that e-cigarettes and related equipment, such as chargers, were involved in more than 100 fires in less than two years.

Source

Related posts

Gorilla Glass 4 shouldn’t shatter when you drop your phone

Gorilla Glass 4 shouldn't shatter when you drop your phone

Plenty of mobile device screens can easily resist minor cracks and scratches, but let's be honest -- those aren't the biggest problems. No, the real crisis comes when you drop your phone and the display shatters into many pieces. Thankfully, Corning is tackling that accident-related damage in...

That cap can hide your face from surveillance cameras !

That cap can hide your face from surveillance cameras !

The Justice Cap is a baseball hat with a set of LEDs on it that boast anti-camera technology that will white out your face when viewed through a surveillance camera. Made for your Liberty loving individual or your standard night time gas station thief, the justice cap is best used against...

A 0.50$ microscope with the resolution of 800 nanometers

A 0.50$ microscope with the resolution of 800 nanometers

When Manu Prakash, PhD, wants to impress lab visitors with the durability of his Origami-based paper microscope, he throws it off a three-story balcony, stomps on it with his foot and dunks it into a water-filled beaker. Miraculously, it still works. Even more amazing is that this microscope...

Leave a comment