4 ms·
"Eclypsium says it found Gigabyte’s hidden firmware mechanism while scouring customers’ computers for firmware-based malicious code, an increasingly common tool
by scns 3y ago
"Eclypsium says it found Gigabyte’s hidden firmware mechanism while scouring customers’ computers for firmware-based malicious code, an increasingly common tool employed by sophisticated hackers. In 2018, for instance, hackers working on behalf of Russia’s GRU military intelligence agency were discovered silently installing the firmware-based anti-theft software LoJack on victims’ machines as a spying tactic. Chinese state-sponsored hackers were spotted two years later repurposing a firmware-based spyware tool created by the hacker-for-hire firm Hacking Team to target the computers of diplomats and NGO staff in Africa, Asia, and Europe. Eclypsium’s researchers were surprised to see their automated detection scans flag Gigabyte’s updater mechanism for carrying out some of the same shady behavior as those state-sponsored hacking tools—hiding in firmware and silently installing a program that downloads code from the internet."
> The rest of the article is just ranting
I am puzzled by your conclusion.
Edit:
> enable the option in the BIOS to install Gigabyte's software it will end up being installed
Am i blind? Zero snark intended but where in the article is that mentioned?
- AshamedCaptain 3y agoYes, it is ranting. They don't actually present any exploit for it. They are just saying "someone once found a way to exploit the firmware, therefore all firmware is vulnerable!" which is very lousy. There is no hint for example that this can be converted into a "persistent hiding-in firmware" backdoor anymore than any other regular Windows install. The fact that the software is distributed via WPBT is almost orthogonal to the vulnerability itself.