2 ms·
Malware is in fact using IME.[1] And remotely exploitable vulnerabilities have been found it in.[2] [1] https://blogs.technet.microsoft.com/mmpc/2017/06/07/pla
by Buge 9y ago
Malware is in fact using IME.[1] And remotely exploitable vulnerabilities have been found it in.[2]
[1] https://blogs.technet.microsoft.com/mmpc/2017/06/07/platinum-continues-to-evolve-find-ways-to-maintain-invisibility/ https://blogs.technet.microsoft.com/mmpc/2017/06/07/platinum...
[2] https://arstechnica.com/information-technology/2017/05/intel-patches-remote-code-execution-bug-that-lurked-in-cpus-for-10-years/ https://arstechnica.com/information-technology/2017/05/intel...
- davemp 9y agoI'm surprised I didn't hear about this until now. It looks like the user had to have enabled AMT, so this isn't exactly conspiracy levels. It is troubling how little priority the computer world gives to proper security models.