{"id":979,"date":"2022-07-04T09:31:45","date_gmt":"2022-07-04T09:31:45","guid":{"rendered":"https:\/\/sattrix.com\/blog\/?p=979"},"modified":"2024-11-19T08:19:10","modified_gmt":"2024-11-19T08:19:10","slug":"a-malware-infected-cac-card-reader-has-become-a-security-concern","status":"publish","type":"post","link":"https:\/\/www.sattrix.com\/blog\/a-malware-infected-cac-card-reader-has-become-a-security-concern\/","title":{"rendered":"A Malware-Infected CAC Card Reader has Become a Security Concern"},"content":{"rendered":"<p style=\"text-align: justify;\">An incident recently reported by <a href=\"https:\/\/krebsonsecurity.com\/2022\/05\/when-your-smart-id-card-reader-comes-with-malware\/\" target=\"_blank\" rel=\"noopener\">KrebsOnSecurity\u2019s<\/a> Brian Krebs highlighted how crucial malware protection is. <span data-contrast=\"none\">M<\/span><span data-contrast=\"none\">illions of employees and contractors are given secure smart ID cards. These cards allow them to enter buildings and otherwise restricted areas. Such ID cards also allow this personnel to access computer networks and systems. However, some employees don\u2019t have access to authorized card readers that would allow them to use such cards when working remotely or from home. And they have to rely on shady card readers that are available online, the consequences of which can be disastrous.<\/span><\/p><div id=\"ez-toc-container\" class=\"ez-toc-v2_0_69 counter-hierarchy ez-toc-counter ez-toc-grey ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title \" >Table of Contents<\/p>\n<span class=\"ez-toc-title-toggle\"><a href=\"#\" class=\"ez-toc-pull-right ez-toc-btn ez-toc-btn-xs ez-toc-btn-default ez-toc-toggle\" aria-label=\"Toggle Table of Content\"><span class=\"ez-toc-js-icon-con\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/span><\/a><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/www.sattrix.com\/blog\/a-malware-infected-cac-card-reader-has-become-a-security-concern\/#How_a_CAC_card_reader_became_a_security_issue\" title=\"How a CAC card reader became a security issue\u00a0\">How a CAC card reader became a security issue\u00a0<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/www.sattrix.com\/blog\/a-malware-infected-cac-card-reader-has-become-a-security-concern\/#Malware_detection_on_the_card_reader\" title=\"Malware detection on the card reader\u00a0\u00a0\">Malware detection on the card reader\u00a0\u00a0<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/www.sattrix.com\/blog\/a-malware-infected-cac-card-reader-has-become-a-security-concern\/#How_to_stay_safe_with_Malware_Protection\" title=\"How to stay safe with Malware Protection\u00a0\">How to stay safe with Malware Protection\u00a0<\/a><\/li><\/ul><\/nav><\/div>\n\n<h3 aria-level=\"2\"><span class=\"ez-toc-section\" id=\"How_a_CAC_card_reader_became_a_security_issue\"><\/span><b><span data-contrast=\"none\">How a CAC card reader became a security issue<\/span><\/b><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559738&quot;:40,&quot;335559739&quot;:0,&quot;335559740&quot;:259}\">\u00a0<\/span><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p style=\"text-align: justify;\">A case just came to light that highlights how serious this situation is. A Personal Identity Verification (PIV) smart card was provided to an employee of a organization\u2019s contractor. These cards are designed for civilian workers. This employee decided to buy a smart card reader from Amazon since he didn&#8217;t have one at home. He purchased a $15 reader from Amazon. The product was specifically described to be designed for smart cards.<\/p>\n<p style=\"text-align: justify;\">The USB gadget Mark chose was also the very first result that popped up on Amazon.com when he searched for a &#8220;PIV card reader.&#8221; The product also had thousands of positive reviews. He intended to use the device for his Common Access Card (CAC). Such cards are the standard form of identification for uniformed officers, civilian workers, and contractor personnel. These cards, in addition to enabling entry to restricted areas, also give access to DoD computer systems and networks.<\/p>\n<h3 aria-level=\"2\"><span class=\"ez-toc-section\" id=\"Malware_detection_on_the_card_reader\"><\/span><b><span data-contrast=\"none\">Malware detection on the card reader<\/span><\/b><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559738&quot;:40,&quot;335559739&quot;:0,&quot;335559740&quot;:259}\">\u00a0<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p style=\"text-align: justify;\">When he received the reader and plugged it into his Windows 10 PC, the operating system suggested checking for the most recent drivers. These drivers were discovered to be malicious. Malware detection sources say that the ZIP file is most likely infected with Ramnit, a dangerous trojan horse that attaches itself to other files and spreads. The infected driver problem is definitely an example of a technological company&#8217;s website being hacked.<\/p>\n<p style=\"text-align: justify;\">The initial Ramnit versions that appeared in 2010 were computer viruses that affected EXE, DLL, and HTML files. Later versions were capable of private data theft from the infected system. But despite warnings, when the necessity comes, a large number of government personnel will buy such readers from different online retailers. This makes it a big issue.<\/p>\n<p style=\"text-align: justify;\">Amazon has announced that it is looking into the problem. Even if Amazon removes the gadget listing, individuals who have already purchased the device are in danger of downloading malware from the product\u2019s website without realizing it.<\/p>\n<h3 aria-level=\"2\"><span class=\"ez-toc-section\" id=\"How_to_stay_safe_with_Malware_Protection\"><\/span><b><span data-contrast=\"none\">How to stay safe with Malware Protection<\/span><\/b><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559738&quot;:40,&quot;335559739&quot;:0,&quot;335559740&quot;:259}\">\u00a0<\/span><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p style=\"text-align: justify;\">The Internet is a dangerous place, and you should always be protected by a professional <a href=\"https:\/\/sattrix.com\/\" rel=\"noopener\">Cybersecurity Service Provider<\/a>. Sattrix is a professional Cybersecurity company that can assist you with all manners of security requirements including malware detection and malware protection. We are more than simply cybersecurity service providers; we are your best line of defense against all kinds of cyber attacks.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>An incident recently reported by KrebsOnSecurity\u2019s Brian Krebs highlighted how crucial malware protection is. Millions<\/p>\n","protected":false},"author":1,"featured_media":984,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0},"categories":[22],"tags":[23,97,70,98,99,96],"_links":{"self":[{"href":"https:\/\/www.sattrix.com\/blog\/wp-json\/wp\/v2\/posts\/979"}],"collection":[{"href":"https:\/\/www.sattrix.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.sattrix.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.sattrix.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.sattrix.com\/blog\/wp-json\/wp\/v2\/comments?post=979"}],"version-history":[{"count":8,"href":"https:\/\/www.sattrix.com\/blog\/wp-json\/wp\/v2\/posts\/979\/revisions"}],"predecessor-version":[{"id":1202,"href":"https:\/\/www.sattrix.com\/blog\/wp-json\/wp\/v2\/posts\/979\/revisions\/1202"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.sattrix.com\/blog\/wp-json\/wp\/v2\/media\/984"}],"wp:attachment":[{"href":"https:\/\/www.sattrix.com\/blog\/wp-json\/wp\/v2\/media?parent=979"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.sattrix.com\/blog\/wp-json\/wp\/v2\/categories?post=979"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.sattrix.com\/blog\/wp-json\/wp\/v2\/tags?post=979"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}