NetacFileLock

AI Agent Uncovers Backdoors with Password 123456 and Hardcoded Keys in Encrypted USB Drives

An AI-powered analysis has exposed critical flaws in multiple USB encryption and copy-protection products, including hardcoded administrator accounts and keys independent of user passwords. The research focused on devices from SecZure, Netac, KakaSoft, and Nexcopy, where fixed credentials such as 123456 and SECZURE.COM allowed full file decryption without the legitimate administrator password. In several cases the encryption key was extracted directly from the binary or configuration files, rendering user passwords irrelevant. The AI agent replicated months of prior manual reverse engineering in minutes using static analysis and Binary Ninja MCP. Weaknesses included the use of fast MD5 and HMAC-MD5 derivations, ECB mode without IVs, and fixed 32-byte AES keys embedded in executables. The findings highlight systemic problems in closed-source cryptographic products marketed for data protection and copy prevention.