Dutch researchers have warned that RFID tags – small microchips, which can be used to tag products or animals - can be infected with computer viruses.

A group under the guidance of Andrew Tanenbaum at the Amsterdam Free University made the world's RFID "malware" publicly available (http://www.rfidvirus.org/index.html). "We hope to convince the experts that the problem is serious and better be dealt with,” the Dutch researchers say.

As RFID chips only have a limited memory capacity, it was widely assumed they could not become infected with a virus, but researchers discovered that if certain vulnerabilities exist in RFID software a RFID tag can be (intentionally) infected with a virus, which could infect the backend database used by the RFID software. From there it can easily spread to other RFID tags, researchers explained today at the Annual IEEE Conference on Pervasive Computing and Communications in Pisa, Italy.

One possible target could be airports. From May 2006, RFID tags at Las Vegas Airport will be attached to suitcases to speed up the baggage handling process. If someone attaches an infected RFID tag to these cases, the entire system could be disrupted, researchers warn.

They stress that developers must introduce measures to check their RFID systems and implement safety procedures to prevent widespread infection.®

Related stories

Airport to tag passengers (12 October 2006)
http://www.theregister.co.uk/2006/10/12/airport_rfid/
EU opens public consultation on RFID (4 July 2006)
http://www.theregister.co.uk/2006/07/04/eu_rfid_consultation/
RFID chips for migrant workers in the US? (31 May 2006)
http://www.theregister.co.uk/2006/05/31/rfid_for_us/
EC should extend privacy regs to RFID, says bar code chief (22 March 2006)
http://www.theregister.co.uk/2006/03/22/gs1_rfid_privacy/
Belgians implant RFID chip in tooth (20 March 2006)
http://www.theregister.co.uk/2006/03/20/rfid_in_tooth/
Europe tagging along on RFID (10 March 2006)
http://www.theregister.co.uk/2006/03/10/reding_rfid_oinion/
Reding to report to EC on RFID (10 March 2006)
http://www.theregister.co.uk/2006/03/10/ec_rfid_consultation/
Managing the RFID opportunity (1 March 2006)
http://www.theregister.co.uk/2006/03/01/rfid_tibco_tnt/
'RFID tag' - the rude words ID card ministers won't say (30 January 2006)
http://www.theregister.co.uk/2006/01/30/burnham_rfid_evasions/
Rules for RFID chips in US passports (27 October 2005)
http://www.theregister.co.uk/2005/10/27/outlaw_passports/