IBM Accidentally Sends Malware-Infected USB Sticks To Storage Customers

IBM accidentally sent USB memory sticks containing malware to some customers that ordered its the IBM Storwize V3500, V3700 and V5000 Gen 1 system flash storage products.

The malicious software is contained in the initialisation tool, which when launched copies the malware to the hard drive in a temporary folder. The application isn’t launched automatically, which is some small comfort to those impacted.

A full list of USB sticks impacted is listed here and IBM is urging customers to either destroy them immediately or repair the drives so they can be reused.

IBM security USB

However if the drive has already been used, IBM says businesses should ensure antivirus products are updated so the issues can be addressed. A list of what various antivirus providers identify the offending software as has also been released by IBM.

“If you have used the initialization USB flash drive from one of the IBM products listed … and have inserted it into a desktop or laptop to initialize a Storwize system, IBM recommends you verify your antivirus software has already removed the infected file or alternatively remove the directory containing the identified malicious file in the manner described below,” the company said.

Although this was an accident, it serves to highlight the ongoing tactic of disseminating malware using USB drives, some of which can be infected at the manufacturing stage.

An experiment by security researcher Elie Bursztein last year found that half of 297 sticks ‘dropped’ in random locations on a university campus were plugged into a PC.

Quiz: What do you know about IBM?

Steve McCaskill

Steve McCaskill is editor of TechWeekEurope and ChannelBiz. He joined as a reporter in 2011 and covers all areas of IT, with a particular interest in telecommunications, mobile and networking, along with sports technology.

Recent Posts

Amazon Prime, Ring Services In US Impacted By AWS Outage

Big name services from Amazon including Prime Video, Ring doorbells and even the Amazon e-commerce…

12 hours ago

Meta Sued For $150 Billion By Rohingya Refugees

Meta sued for billions of dollars for not allegedly removing anti-Rohingya hate speech during 2017…

15 hours ago

Intel To List Self-driving Car unit Mobileye

Public offering planned for Intel's self-driving-car unit Mobileye next year, but Intel says it will…

16 hours ago

Virgin Media O2 Completes Gigabit Network Upgrade

Ultrafast broadband. 15.5 million homes can now access speeds of 1.1Gbps, after Virgin Media O2…

17 hours ago

Craig Wright Wins US Case Over Bitcoin Inventor Claim

Computer scientist who claims to be Satoshi Nakamoto, wins US court case against former partner,…

19 hours ago

300 Spar Stores Impacted After Cyberattack On Supplier

Family run firm in Preston, Lancashire suffers cyberattack, which impacts tills and IT systems for…

20 hours ago