IBM Storwize: IBM has released a security warning for users of some company's USB flash drives that may be running malicious code.
The problem seems to be with the flash drives in the products IBM Storwize. According to the company, they have the Initialization Tool for IBM Storwize, which is a large storage system data for data centers.
Η IBM δηλώνει ότι ο σειριακός αριθμός των μολυσμένων μονάδων USB είναι ο 01AC585 και έχουν κυκλοφορήσει με διάφορα productτα – μοντέλα: ΙBM Storwize V3500 – 2071 μοντέλα 02A και 10A, ΙBM Storwize V3700 – 2072 μοντέλα 12C, 24C και 2DC, ΙBM Storwize V5000 – 2077 μοντέλα 12C και 24C, και IBM Storwize V5000 – 2078 μοντέλα 12C και 24C.
“IBM has identified a malicious file that is distributed on USB flash drives used in the initialization tool for IBM Storwize V3500, V3700, and V5000 Gen 1 systems. When the Initialization Tool is launched from the USB, it copies itself to a temporary folder on the hard drive disk of the desktop or laptop computer during normal operations," the company said.
The malicious file is copied to a temporary folder (% TMP% \ initTool for Windows and / tmp / initTool for Linux).
IBM advises users to verify with the software antivirus to see if they have already removed the infected file or if they have removed the folder containing the infected malicious file.
The company notes that Windows users will need to make sure that the entire folder is permanently deleted and has not been moved to the Recycle Bin.
IBM advises the owners of the above USB to destroy it so that it can not be reused or repaired by permanently deleting the InitTool folder from the drive. Those who do the second can download a new copy of the Initialization package from FixCentral.
Malicious code on infected units is copied only to user devices, but it does not run. There are no additional details about this malicious software in the IBM publication, nor information about how it occurred.
