Guru3D.com
  • HOME
  • NEWS
    • Channels
    • Archive
  • DOWNLOADS
    • New Downloads
    • Categories
    • Archive
  • GAME REVIEWS
  • ARTICLES
    • Rig of the Month
    • Join ROTM
    • PC Buyers Guide
    • Guru3D VGA Charts
    • Editorials
    • Dated content
  • HARDWARE REVIEWS
    • Videocards
    • Processors
    • Audio
    • Motherboards
    • Memory and Flash
    • SSD Storage
    • Chassis
    • Media Players
    • Power Supply
    • Laptop and Mobile
    • Smartphone
    • Networking
    • Keyboard Mouse
    • Cooling
    • Search articles
    • Knowledgebase
    • More Categories
  • FORUMS
  • NEWSLETTER
  • CONTACT

New Reviews
Razer Leviathan V2 gaming soundbar review
Guru3D NVMe Thermal Test - the heatsink vs. performance
EnGenius ECW220S 2x2 Cloud Access Point review
Alphacool Eisbaer Aurora HPE 360 LCS cooler review
Noctua NH-D12L CPU Cooler Review
Silicon Power XPOWER XS70 1TB NVMe SSD Review
Hyte Y60 chassis review
ASUS ROG Thor 1000W Platinum II (1000W PSU) review
ASUS ROG Rapture GT-AXE11000 WIFI6E router review
Backforce One Plus Gaming Chair review

New Downloads
CrystalDiskInfo 8.17 Download
AMD Radeon Software Adrenalin 22.6.1 Windows 7 driver download
ReShade download v5.2.2
HWiNFO Download v7.26
7-Zip v22.00 Download
GeForce 516.40 WHQL driver download
Intel ARC graphics Driver Download Version: 30.0.101.1736
AMD Radeon Software Adrenalin 22.5.2 WHQL driver download
Corsair Utility Engine Download (iCUE) Download v4.24.193
Intel HD graphics Driver Download Version: 30.0.101.1994


New Forum Topics
PlayStation 3 emulator increases its CPU performance by 30% with AVX-512 Ryzen 7000X3D with 100 MB of cache already planned for this year NVIDIA GeForce 516.40 WHQL driver download & Discussion NVIDIA Profile Inspector 2.3.0.13 JONSBO two-sided glass middle tower U6 Blac" pulls out the internal unit easily. GeForce GTX 1630 will launch on June 28 Collapse of crypto mining industry leads to auctioning off of thousands of graphics cards AMD Radeon Software - UWP Weird color issue new driver vs old NVIDIA RTX 40 Series Might Get 800 Watts TBP




Guru3D.com » News » LightEater malware attacks uEFI BIOSes

LightEater malware attacks uEFI BIOSes

by Hilbert Hagedoorn on: 03/21/2015 01:36 PM | source: | 55 comment(s)
LightEater malware attacks uEFI BIOSes

I've been wondering about UEFI BIOSes myself for a while now, sure they look and work great, but an uEFI BIOS is an OS on its own, and as such rather vulnerable. At the security conference CanSecWest, security researchers Corey Kallenberg and Xeno Kovah revealed that even an unskilled person could use an implant called LightEater to infect a vulnerable system in mere moments.

An unpatched BIOS can easily be infected with malware or a virus. Motherboards from companies like Gigabyte, Acer, MSI, HP and Asus are at risk, especially if you are not updating your BIOS on a regular basis towards the latest revision (and let's be frank here, who does ?). 

As betanews writes the following on the topic, Introducing the vulnerability, Kallenberg and Kovah said:

So you think you're doing OPSEC right, right? You're going to crazy lengths to protect yourself, reinstalling your main OS every month, or using a privacy-conscious live DVD like TAILS. Guess what? BIOS malware doesn't care! BIOS malware doesn't give a shit!

The malware can be used to infect huge numbers of systems by creating SMM (System Management Mode) implants which can be tailored to individual BIOSes with simple pattern matching. A BIOS from Gigabyte was found to be particularly insecure.

We didn't even have to do anything special; we just had a kernel driver write an invalid instruction to the first instruction the CPU reads off the flash chip, and bam, it was out for the count, and never was able to boot again.

The vunerability is something that has already been exploited by the NSA, but the researchers are encouraging businesses and governments to take the time to install BIOS patches that plug the security hole.

 







« Download SSD-Z v15.03.15b · LightEater malware attacks uEFI BIOSes · Gigabyte Launches 990XA-UD3 R5 Socket AM3+ Motherboard »

11 pages 1 2 3 4 > »


Extraordinary
Senior Member



Posts: 19562
Joined: 2010-04-21

#5033758 Posted on: 03/21/2015 01:43 PM


Talking to The Register, Kopvah explained that the problem is made worse because of the fact that very few people take the trouble to update their BIOS. This is something the pair are hoping to change by highlighting the ease with which an unpatched BIOS can be infected with malware."



Oh, I keep my BIOS updated, when the manufacture actually releases updates (Yea ASUS, 3 years ago was my last update, thanks)

moab600
Senior Member



Posts: 6421
Joined: 2004-09-30

#5033766 Posted on: 03/21/2015 02:00 PM
If there is anything i can say about Asus bios updates for mobo, is that they are frequent and good, job well done.

Unlike support for xonar series... if that pose a threat i hope they release counter bios fast.

BarryB
Senior Member



Posts: 1163
Joined: 2007-07-11

#5033769 Posted on: 03/21/2015 02:03 PM
My latest BIOS I flashed last September! So, do we need another BIOS update to patch this exploit or will it just be left as they think no one will actually use it?

Extraordinary
Senior Member



Posts: 19562
Joined: 2010-04-21

#5033772 Posted on: 03/21/2015 02:07 PM
If there is anything i can say about Asus bios updates for mobo, is that they are frequent and good, job well done.



This review of my ASUS CHvF board is in August 2011
http://www.guru3d.com/articles-pages/asus-crosshair-v-formula-review,1.html

The last BIOS update for the CHvF was October 2012

Glasofruix
Member



Posts: 98
Joined: 2012-06-25

#5033774 Posted on: 03/21/2015 02:12 PM
updating your BIOS on a regular basis


I just follow the general rule of "if it ain't broken, don't fcking touch it", since you know, updating a bios is not without risks.

11 pages 1 2 3 4 > »


Post New Comment
Click here to post a comment for this news story on the message forum.


Guru3D.com © 2022