Advanced Threats Researcher Paul Ferguson alerted us today to a report that Amazon.com and Samsung have informed their consumers regarding the discovery of a Sality worm on the product’s installer disc (Samsung Frame Manager XP version 1.08). The infected installer disc is needed to use their product, the Samsung SPF-85H 8-Inch Digital Photo Frames w/ 1GB Internal Memory, as a USB monitor. The SANS Internet Storm Center (ISC) also issued a report on this incident.
According to the email sent by Amazon.com, users using Vista and other Frame managers are not affected by this. They also gave detailed instructions on how to remove the worm if the users already run and installed the malware. People who ordered the SPF-85H 8-Inch Digital Photo Frames through Amazon.com received the notification. While infected devices may not be totally new, it presents a growing trend of similar incidents:
- Digital Photo Frames FrameUp?
- McDonald’s Japan Recalls Promotional MP3 Players
- Get Your IPOD Now - And Get A Free Worm!
On that note, it is clear that device manufacturers need to come up with means to check their products, and their installer CDs for this case, for malware infection.