- Liittynyt
- 13.11.2018
- Viestejä
- 70
eclypsium : " Our follow-up analysis discovered that firmware in Gigabyte systems is dropping and executing a Windows native executable during the system startup process, and this executable then downloads and executes additional payloads insecurely.
...
The “WpbtDxe.efi” module checks if the “APP Center Download & Install” feature has been enabled in the BIOS/UEFI Setup before installing the executable into the WPBT ACPI table. Although this setting appears to be disabled by default, it was enabled on the system we examined. "
Kevyt uutisointi asiasta
www.wired.com
Ja ihan oikeata nippelitietoa asiasta
eclypsium.com
...
The “WpbtDxe.efi” module checks if the “APP Center Download & Install” feature has been enabled in the BIOS/UEFI Setup before installing the executable into the WPBT ACPI table. Although this setting appears to be disabled by default, it was enabled on the system we examined. "
Kevyt uutisointi asiasta
![www.wired.com](https://media.wired.com/photos/6476648f88479249e0cc299a/191:100/w_1280,c_limit/Millions-of-PC-Motherboards-Were-Sold-With-a-Firmware-Backdoor-Security-GettyImages-635901432.jpg)
Millions of PC Motherboards Were Sold With a Firmware Backdoor
Hidden code in hundreds of models of Gigabyte motherboards invisibly and insecurely downloads programs—a feature ripe for abuse, researchers say.
Ja ihan oikeata nippelitietoa asiasta
![eclypsium.com](https://eclypsium.com/wp-content/uploads/feature_giga-1.jpg)
Supply Chain Risk from Gigabyte App Center Backdoor - Eclypsium | Supply Chain Security for the Modern Enterprise
Eclypsium Research discovers that Gigabyte motherboards have an embedded backdoor in their firmware, which drops a Windows executable that can download and execute additional payloads insecurely. The backdoor affects gaming PCs and high-end computers.
![eclypsium.com](https://eclypsium.com/wp-content/uploads/Eclypsium-Favicon.jpg)