Security Notice - Statement on the Shamoon Attacks Issue

Huawei noticed that Palo Alto posted a blog titled "Second Wave of Shamoon 2 Attacks Identified" on January 9, 2017. The blog mentioned that the Shamoon attack sample contains several usernames and passwords from official documentation related to Huawei virtual desktop infrastructure (VDI) solution (official name: FusionCloud Desktop Solution).

Huawei immediately launched an investigation and confirmed that the usernames and passwords mentioned in the blog came from the official documentation of Huawei VDI solution but not a security vulnerability in the solution itself. The official documentation explicitly states that the usernames and initial passwords are used only for deploying the system and requires users to change the initial passwords. Specifically, administrators of the VDI solutions are forced to change the passwords upon initial login.