Category Archives: implants

New UFEI Rootkit

Posted on by

Kaspersky is reporting on a new UFEI rootkit that survives reinstalling the operating system and replacing the hard drive. From an article:

The firmware compromises the UEFI, the low-level and highly opaque chain of firmware required to boot up nearly every modern computer. As the software that bridges a PC’s device firmware with its operating system, the UEFI—short for Unified Extensible Firmware Interface—is an OS in its own right. It’s located in an SPI-connected flash storage chip soldered onto the computer motherboard, making it difficult to inspect or patch the code. Because it’s the first thing to run when a computer is turned on, it influences the OS, security apps, and all other software that follows. …

Continue reading New UFEI Rootkit→

BSides Las Vegas, iMessage Exploit, 5G and Stingray Surveillance

Posted on by

This is your Shared Security Weekly Blaze for August 12th 2019 with your host, Tom Eston. In this week’s episode: My summary of last week’s BSides Las Vegas security conference, how a single text message to your iPhone could get you hacked,… Continue reading BSides Las Vegas, iMessage Exploit, 5G and Stingray Surveillance→

Another Bloomberg Story about Supply-Chain Hardware Attacks from China

Posted on by

Bloomberg has another story about hardware surveillance implants in equipment made in China. This implant is different from the one Bloomberg reported on last week. That story has been denied by pretty much everyone else, but Bloomberg is sticking by its story and its sources. (I linked to other commentary and analysis here.) Again, I have no idea what’s true…. Continue reading Another Bloomberg Story about Supply-Chain Hardware Attacks from China→

Skygofree: New Government Malware for Android

Posted on by

Kaspersky Labs is reporting on a new piece of sophisticated malware: We observed many web landing pages that mimic the sites of mobile operators and which are used to spread the Android implants. These domains have been registered by the attackers sinc… Continue reading Skygofree: New Government Malware for Android→

Skygofree: New Government Malware for Android

Posted on by

Kaspersky Labs is reporting on a new piece of sophisticated malware: We observed many web landing pages that mimic the sites of mobile operators and which are used to spread the Android implants. These domains have been registered by the attackers since 2015. According to our telemetry, that was the year the distribution campaign was at its most active. The… Continue reading Skygofree: New Government Malware for Android→

ShadowBrokers Releases NSA UNITEDRAKE Manual

Posted on by

The ShadowBrokers released the manual for UNITEDRAKE, a sophisticated NSA Trojan that targets Windows machines: Able to compromise Windows PCs running on XP, Windows Server 2003 and 2008, Vista, Windows 7 SP 1 and below, as well as Windows 8 and Windows Server 2012, the attack tool acts as a service to capture information. UNITEDRAKE, described as a "fully extensible… Continue reading ShadowBrokers Releases NSA UNITEDRAKE Manual→