7 ms·
A factory reset, according to Cisco, will fix it. Correction: according to the original report a reset will mitigate the stage 2 and 3 attack only Source: htt
by drchiu 8y ago
A factory reset, according to Cisco, will fix it.
Correction: according to the original report a reset will mitigate the stage 2 and 3 attack only
Source: https://blog.talosintelligence.com/2018/05/VPNFilter.html?m=1 https://blog.talosintelligence.com/2018/05/VPNFilter.html?m=...
- isostatic 8y agoAccording to talos, a reboot will remove stage 2 and 3 but not 1. It's not clear how stage 1 installs. Is it into the (hidden) base Linux install in rc.local or whatever, does it get into the bios/firmware of the computer.
- WalterBright 8y agoIt's really too bad that nobody makes hardware with the obvious solution - put the firmware in ROM. Then it cannot be altered by malware. If the vendor really, really wants to update the firmware, have the write-enable switch be a physical one, not a software switch.
- ryanmarsh 8y agoMind boggling this isn’t the default.
- ComodoHacker 8y agoYou really want vendor to patch vulnerabilities in firmware without pushing any buttons.
- WalterBright 8y agoSo you want the ability to remotely update to protect against the malware being installed via remote update?
- jake_the_third 8y agoAnd you really don't want malicious actors to push malware to vulnerable firmware without pushing any buttons. When firmware can't fully trust itself (and it cant), the correct option is to deffer ultimate judgement and control to the physical owner.
- ComodoHacker 8y agoThis wouldn't work with consumer hardware.
- jake_the_third 8y agoWhy?
- 8bitsrule 8y agoHeh. I'm so old, I can remember that only time, ever, that a vendor sent me an upgrade hardware and a box to return the old one in. (Don't remember which vendor, only that it wasn't a rich one.)