Click Here to Download Your AVEA Ventilator Software Update. Trust Me.

2012-06-08

Medical Device Security Center

http://blog.secure-medicine.org/2012/06/click-here-to-download-your-avea.html


Summary: The web server distributing the software updates for a ventilator (a medical device) itself needs some help with software updates. According to Google, the web server was infected with 48 viruses and 2 scripting exploits. 20 pages resulted in malicious software being downloaded and installed without user consent. 
The risks should be obvious. This is an update for a medical device, and yet one must download it in a manner as if software sepsis is no big deal. Health care professionals might as well stop their washing hands while they're at it.

[...]
main page ATTRITION feedback