Lenovo's 'Encrypted' Fingerprint USB Contains Unencrypted SD Card

• Security researcher Xusheng Li discovered that Lenovo's ThinkPlus FU100 fingerprint USB stick contains an unencrypted SD card.
• The device was sold as an AES-256-encrypted security product.
• The fingerprint reader only enabled the USB connection without any actual encryption on the SD card.
• An AI-assisted follow-up found backdoor accounts on the device.
• The USB drive was marketed for data security but failed to deliver on its encryption claims.