Asus releases Live Update software with security measures
Yesterday the news broke that Asus Live Update software installed on laptops and PCs from the Taiwanese manufacturer contained a backdoor between June and November 2018. Thus far it has been silent at the ASUS camp.
Malicious folks this way could install malware on specific systems. ASUS, however, updated its Live Update software and has released a new version with security measures. The manufacturer is staying awfully silent in light of this incident in terms of content or warning published on their websites, especially considering that over 500.000 could have been affected. Version 3.6.8 of the Live Update software prevents manipulation by third parties. Asus also mentions that end-to-end encryption is now being applied in the update software and that security measures have been taken on the update servers to prevent similar attacks in the future.
ASUS response to the recent media reports regarding ASUS Live Update tool attack by Advanced Persistent Threat (APT) groups
Advanced Persistent Threat (APT) attacks are national-level attacks usually initiated by a couple of specific countries, targeting certain international organizations or entities instead of consumers.
ASUS Live Update is a proprietary tool supplied with ASUS notebook computers to ensure that the system always benefits from the latest drivers and firmware from ASUS. A small number of devices have been implanted with malicious code through a sophisticated attack on our Live Update servers in an attempt to target a very small and specific user group. ASUS customer service has reached out to affected users and provided assistance to ensure that the security risks are removed.
ASUS has also implemented a fix in the latest version (version 3.6.8) or the Live Update software, introduced multiple security verification mechanisms to prevent any malicious manipulation in the form or software updates or other means, and implemented an enhanced end-to -end encryption mechanism. At the same time, we have also updated and strengthened our server-to-end user software architecture to prevent similar attacks from happening in the future.
Additionally, we have created an online security diagnostic tool to check for affected systems, and we encourage users who are still concerned to run it as a precaution. The tool can be found here: https://dlcdnets.asus.com/pub/ASUS/nb/Apps-for-Win10/ASUSDiagnosticTool/ASDT-v1.0.1.0.zip
Users who have any additional concerns are welcome to contact ASUS Customer Service.
More information about APT groups: https://www.fireeye.com/current-threats/apt-groups.html
ASUS Releases 32-inch ROG Strix XG32VQR 1440p 144Hz FreeSync 2 HDR - 11/28/2018 05:15 PM
ASUS is now listing the new 32-inch ROG Strix XG32VQR display, offering users a large FreeSync 2 HDR compliant VA panel with a wide color gamut (125% sRGB) and a high 144Hz maximum refresh rate. The ...
ASUS Releases ROG Aura RGB Terminal - 05/29/2018 07:51 AM
ASUS has released a Four-port addressable RGB controller with ROG Halo and Aura Sync which you can hook up to your compatible motherboard and further expand your RGB bling on. With ASUS Halo you can ...
ASUS Releases TUF Gaming FX504 Gaming Laptop - 04/11/2018 07:52 AM
FX504 is the first laptop in the new TUF Gaming Series. To ensure system longevity and stable performance, FX504 features the patented Anti-Dust Cooling (ADC), and it's powered by the latest-generat...
ASUS Releases Budget VP228QG Gaming Monitor - 04/03/2018 07:04 AM
ASUS launches a tiny 21.5 inch Full HD, 1ms, 75Hz TN monitor. It's Adaptive-Sync/FreeSync compatible. VP228QG 21.5" Full HD monitor with 100,000,000:1 high contrast ratio and eliminates sm...
ASUS Releases VG255H Console Gaming Monitor - 24.5”, FHD (1920x1080) 1ms - 03/28/2018 07:45 AM
Built for the console and PC gaming experience, the TN panel based 24.5” ASUS VG255H Full HD gaming monitor features a fast 1ms response time and 75Hz refresh rate. ...
Senior Member
Posts: 12052
Joined: 2014-07-21
Oh the irony of releasing a new update software to patch your malware ridden update software...
At least they did something. Now, months after. Still not going to install their rubbish for my Asus board.
Senior Member
Posts: 11190
Joined: 2003-05-24
some how I think this effect more then the thousands that was reported.
Senior Member
Posts: 112
Joined: 2015-12-10
so the link for the tool is not working
Senior Member
Posts: 1455
Joined: 2016-08-01
So they released an uninstaller?
Senior Member
Posts: 4343
Joined: 2008-03-03
got an UPATE posted here:
https://forums.guru3d.com/threads/hackers-hijacked-asus-software-updates-to-install-backdoors-on-thousands-of-computers.425920/
scroll down, theres teh Update.
cheers