Energizer Battery Charger Software Included Backdoor
Summary: Symantec found that an optional Windows software application for the Energizer Duo USB battery charger contained a hidden backdoor allowing unauthorized remote access, and Symantec believes the tainted software may have been in circulation since May 2007. The backdoor runs at every computer start and listens for commands that can download a file, run a file, list files on the system, and offload those files to a remote attacker; US-CERT published an advisory on removing it.
What's compelling: The malicious component was a DLL whose language metadata specified Chinese (PRC), and the software was optional and downloaded from Energizer's website rather than shipped with the device, so a customer's only defense was trust in a vendor download. The same week, Panda Security reported a factory-packed Vodafone HTC Magic with Android that used Windows autorun to enlist the host in the Mariposa botnet.
Read the original at Krebs on Security ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026