If remote execution of code via Flash or Java vulnerabilities isn't irritating enough, the Hacking Team leaks could have opened the door to more persistent pwnage, too. Trend Micro warns of a UEFI rootkit developed by the gray-hat devs that's designed to make life miserable for victims with unsecured motherboards. Once it's flashed to the system's firmware, the rootkit ensures that Hacking Team's Remote Control System malware remains installed on the target machine by checking for its presence in Windows before the OS even boots. If the user somehow manages to purge the malware, the compromised firmware reinstalls it before allowing Windows to load.
Since the exploit resides in firmware, reformatting or even replacing the boot volume is not sufficient action to clean the infection. It's not clear whether flashing a clean firmware to the system would purge the infection.
According to Trend Micro, the attack itself requires physical access to the target system, but the company doesn't rule out remote installation as a possibility. One could easily imagine variations of the attack where a phisher calling from "Microsoft support" could remotely flash the firmware of unsuspecting users.
To protect yourself and your PCs, the company recommends enabling UEFI SecureFlash, updating motherboard firmware whenever such an update contains a security patch, and setting up a BIOS or UEFI password.
|1. BIF - $340||2. Ryu Connor - $250||3. mbutrovich - $250|
|4. YetAnotherGeek2 - $200||5. End User - $150||6. Captain Ned - $100|
|7. Anonymous Gerbil - $100||8. Bill Door - $100||9. ericfulmer - $100|
|10. dkanter - $100|
|Examining reports of slow write speeds on the 32GB iPhone 7||11|
|Reports: Radeon RX 470D is a budget Polaris card for China||2|
|Cellular Insights dissects iPhone 7 Plus modem performance||9|
|Deals of the week: scads of high-performance storage and more||7|
|Tobii's Eye Tracker 4C knows where your head is||0|
|GeForce driver 375.57 is prepared for Titanfall 2||5|
|Phanteks Eclipse P400 gets a tempered glass option||0|
|Radeon 16.10.2 drivers add support for October's big games||10|
|Strong revenue doesn't stem red ink in AMD's fiscal third quarter||31|
|A real "console monitor" would be 720p @ 30 Hz ;P||+58|