Real or Fake? Spy chips in Chinese Clothes Iron

[chicken]

A Russian news agency reports that cyber criminals are planting chips in electric irons and kettles to launch spam attacks
http://www.bbc.co.uk/news/blogs-news-from-elsewhere-24707337
http://www.rosbalt.ru/piter/2013/10/22/1190990.html

IMO not very credible.. but now I've to get out the screw drivers. Maybe I can salvage a usable WiFi module from my $13.99 Target iron! 

[c4757p]

State-owned channel Rossiya 24 even showed footage of a technician opening up an iron included in a batch of Chinese imports to find a "spy chip" with what he called "a little microphone". Its correspondent said the hidden devices were mostly being used to spread viruses

Forget the WiFi module, I'm more interested in this new method of spreading viruses by microphone.

Are we 100% sure they haven't fallen for an article from the Russian equivalent of The Onion?

[dexters_lab]

saw that article on TheRegister as well, they seem to think it might be genuine 

http://www.theregister.co.uk/2013/10/29/dont_brew_that_cuppa_your_kettle_could_be_a_spambot/

[NiHaoMike]

Use WPA with a good password (which you should if you're worried about security) and unauthorized devices would not be able to connect.

I don't believe it even though it's possible since it's a lot of work. Much easier to install malware on some random USB device.

[tehmeme]

Some possible propaganda from a competing Russian iron manufacturer? or the some key people didn't get their cut?
Or is this another one of those lost in translation storm in a tea cup pieces

So many questions.
Of all the appliances, why an iron, and a cheap one at that? why not office equipment, stationary or peripherals, that would at least have a better chance of being in the vicinity of a useful signal. (edit: and would be less suspicious under an x-ray or physical inspection, the majority of irons are very sparse inside)

Irons would only be plugged for short periods so this thing would need to have a backup power source (take your pick).

Unless this shipment was targeted at specific consignees, returns whether financial or information cost of doing this would make this non-profitable.

hmm.. 

edit 2: also as NiHaoMike brings up the USB, peripherals could bypass the wifi security via the pc, or on printers, copiers & phones the user will enter the network credentials into the device as part of the setup.

[pickle9000]

I think rigging a keyboard would be a better idea, record keystrokes for a couple days then connect to  a wifi to send them home (not via the pc). 

[tehmeme]

I think rigging a keyboard would be a better idea, record keystrokes for a couple days then connect to  a wifi to send them home (not via the pc).

this would only work if the wifi wasn't properly secured, again, making it extremely mission specific.

[Smokey]

Forget the WiFi module, I'm more interested in this new method of spreading viruses by microphone.

I just smashed every microphone I could think of in my house.  I think I'm safe.  It does make phone calls more difficult though.  Good thing I printed out that Morse Code chart.

[tehmeme]

Forget the WiFi module, I'm more interested in this new method of spreading viruses by microphone.

I just smashed every microphone I could think of in my house.  I think I'm safe.  It does make phone calls more difficult though.  Good thing I printed out that Morse Code chart.

 

[c4757p]

Forget the WiFi module, I'm more interested in this new method of spreading viruses by microphone.

I just smashed every microphone I could think of in my house.  I think I'm safe.  It does make phone calls more difficult though.  Good thing I printed out that Morse Code chart.

Way overkill, dude! I just got my flu shot yesterday, so I'm good

[John Coloccia]

Why not just bury them in the code for WiFi routers and things like that?  They're all made in China.

Who buys clothes irons anymore, anyway?  That's like Little House on the Prairie.  Isn't everything wash and wear now?  Why not embed chips in 8-track players too.

[tehmeme]

Why not just bury them in the code for WiFi routers and things like that?  They're all made in China.

A very good point!

Who buys clothes irons anymore, anyway?

uhmm... 
 I love my freshly ironed shirts on those dark grim British mornings, 
I bought this 2 months ago...
http://www.currys.co.uk/gbuk/home-appliances/ironing/irons/philips-azur-gc4860-02-steam-iron-blue-10016198-pdt.html

That and my coffee maker were cheaper ways of coping with the British weather than moving to warmer climes. 

[dexters_lab]

I am 40 in a few months, i could probably count the number of times i have ironed on two hands... Just dont see the point, its a terrible waste of time and many kWs... imo 

[tehmeme]

I am 40 in a few months, i could probably count the number of times i have ironed on two hands... Just dont see the point, its a terrible waste of time and many kWs... imo 

You're obviously doing it wrong

[Hardcorefs]

Obviously Chinese women do a lot more ironing than the rest of the world.
After buying an Iron 7 years ago.. it has not been used since.

[Dago]

Installing a spy chip on a device that's hidden in a closet without power for 99.9% of the time seems like a good choice.

[dexters_lab]

well the chinese have never been known for putting much thought into their final designs!

[SeanB]

I still have the  clothes iron I bought in 1987, and it still works. Did a lot of work ironing military uniforms over the years, and even did beds......

[JohnnyGringo]

Maybe it's a spy chip aimed at all the hobbyists who use "Toner Transfer for PCB Making".

[Mr Pig]

Putting the devices in low-cost appliances would reduce the financial hit should a shipment be intercepted and rejected. Also, as the appliances would most likely be discarded and replaced when faulty, rather than being opened up for repair, there is less chance the device will be discovered.

Just pondering on why one might choose such an apparently dumb conveyance.

[NiHaoMike]

Why bother when you can just load malware onto random USB drives? That actually has happened several times in the past, though disabling autoplay defeats it.

[Mr Pig]

High-current devices like irons and kettles may have been chosen disguise the additional power consumption of the spy device during quality-control or import checks. Or maybe whoever wanted to do this just happened to have a bent friend with a kettle factory!

And it may not have been about collecting intelligence at all. It could be a plot by an individual or gang intending to blackmail the victims using the recordings. All pretty mad but it does prove one thing.

you really, really can't trust the Chinese!

[chicken]

Forget the WiFi module, I'm more interested in this new method of spreading viruses by microphone.

Well, here you go:
http://arstechnica.com/security/2013/10/meet-badbios-the-mysterious-mac-and-pc-malware-that-jumps-airgaps/

[mrflibble]

The problem with the last article is that it's more anecdotal than verified hard evidence. BUT, it does make for a cool story.

[amyk]

I think neither that one nor this one is true at all... Halloween tends to bring out these sorts of pranks.