Razer Distributing Malware

[Vulcan]

The support website at gaming hardware manufacturer Razer, has been compromised to distribute malware.

Razer, in their own words are “the worldwide leader in terms of professional gaming peripherals. While we are light years ahead of our competitors in terms of technology, design and ergonomics“.

A large amount of the device drivers offered for download at the Razer support site were infected with a Trojan. The Trojan delivers the original installer but then goes on to drop a copy of WORM.ASPXOR.AB in the System directory. The malware had very low detection rates, with only 7 out of 41 vendors offering generic detection.

I have informed Razer of this compromise and they have immediately taken the support website down for the time being

http://countermeasures.trendmicro.eu/razer-downloads-distributing-malware/

http://www.razersupport.com/index.php?_m=downloads&_a=view

Just a heads up if you've downloaded drivers in the past few days.

 

[Vulcan]

Their support site states from the 19th of September.