Energizer battery charger opens backdoor on unwary owners
If you can’t trust the Energizer Bunny, who can you trust?
The Energizer DUO USB battery charger contains a backdoor that allows unauthorized remote system access. The United States Computer Emergency Response Team (US-CERT) warns that the installer for the Energizer DUO software places the file UsbCharger.dll in the application’s directory and Arucer.dll in the Windows system32 directory, and then – presto – the bad guys have a backdoor that allows unauthorized remote system access to your machine.
“An attacker is able to remotely control a system, including the ability to list directories, send and receive files, and execute programs. The backdoor operates with the privileges of the logged-on user.”
Here’s Symantec’s description of the Trojan discovery. Energizer has issued a statement acknowledging the issue.

From the point of view of a user it’s wise to always be wary before plugging in anything into a USB port – I’ve heard of several cases where <$100 picture frames come with malware installed, just waiting for you to plug it in and open the backdoor.
And from the POV of system designers, it’s a good idea to check out any USB drivers that you ship with your systems.
[Via Hacker News, via ZDNet.]
CLS commented:
Datacomm commented:
Brian OConnell commented:
The Mad Zapper commented:
jimvandamme commented:
woodla commented:
William Ketel commented:
bunny **** commented:
DLD commented:
John P. Guckel - Milwaukee, WI U.S.A. commented:
Doubter commented:















