0

WTF? Energizer battery charger contains backdoor?

Energizer Duo
What.the.f*ck…Energizer battery charger contains backdoor

The United States Computer Emergency Response Team (US-CERT) has warned that the software included in the Energizer DUO USB battery charger contains a backdoor that allows unauthorized remote system access. In an advisory, the US-CERT warned that he installer for the Energizer DUO software places the file UsbCharger.dll in the application’s directory and Arucer.dll in the Windows system32 directory. An attacker is able to remotely control a system, including the ability to list directories, send and receive files, and execute programs. The backdoor operates with the privileges of the logged-on user.

This is the best reason to pick an open source charger of any kind, like the MintyBoost (not batteries, just devices until the new version šŸ™‚. The MintyBoost will not install software and not trojan your computer.


Make a robot friend with Adafruit’s CRICKIT – A Creative Robotics & Interactive Construction Kit. It’s an add-on to our popular Circuit Playground Express, FEATHER and other platforms to make and program robots with CircuitPython, MakeCode, and Arduino. Start controlling motors, servos, solenoids. You also get signal pins, capacitive touch sensors, a NeoPixel driver and amplified speaker output. It complements & extends your boards so you can still use all the goodies on the microcontroller, now you have a robotics playground as well.

Join 7,500+ makers on Adafruit’s Discord channels and be part of the community! http://adafru.it/discord

CircuitPython in 2018 – Python on Microcontrollers is here!

Have an amazing project to share? Join the SHOW-AND-TELL every Wednesday night at 7:30pm ET on Google+ Hangouts.

Join us every Wednesday night at 8pm ET for Ask an Engineer!

Follow Adafruit on Instagram for top secret new products, behinds the scenes and more https://www.instagram.com/adafruit/


Maker Business — Fewer startups, and other collateral damage from the 2018 tariffs

Wearables — Light as a Worbla feather

Electronics — How to make your own magnetic field probe!

Biohacking — The State of DNA Analysis in Three Mindmaps

Python for Microcontrollers — One year of CircuitPython weeklies!

Get the only spam-free daily newsletter about wearables, running a "maker business", electronic tips and more! Subscribe at AdafruitDaily.com !



8 Comments

  1. Lameeeee

  2. That’s just frack’n lovely.

  3. Why a battery charger even requires software like that is beyond me – can’t you just enumerate as an HID and negotiate up to 500mA?

    The device in question is the opposite of the current MintyBoost, though – it charges AAs / AAAs from USB, not vice versa.

  4. How is a MintyBoost the same as this device? It looks to me like a battery charger and not a device that uses batteries to charge USB devices?
    True, stupid software mistake but do not realy see the connection with a MintyBoost. Or maybe you could use a MintyBoost to charge your batteries? Now that would be stupid! šŸ˜‰

  5. @marius – we said open source “like” the mintyboost, encourage open source so things like this does not happen.

  6. Why do you even need software to run a Nicad charger? With all the various chips out there such as those available from Maxim, it’s all built into the silicon anyway, all the USB port needs to provide is power.

    Sounds like an over-engineered solution that got combined with a software developer’s infected system to produce malware installation disks that also installed the support software for the charger. Brrrrh!

  7. I’ve actually got one of these. Firstly, the mintyboost charges a device like an iPod. Whereas the Energizer charges batteries.

    Secondly, the software tells you how charged your batteries are. However the software is definitely poorly made. The readme had 4 typo’s in it at least.

  8. indiatechnews

    Jees, backdoor access via a usb battery charger! Really a big flaw.

Sorry, the comment form is closed at this time.