Jump to content

Menu

FYI: ASUS releases fix for ShadowHammer malware attack


Arcadia
 Share

Recommended Posts

From Engadget https://www.engadget.com/2019/03/26/asus-releases-fix-for-update-tool-malware-attack/

“ASUS may have inadvertently pushed malware to some of its computers through its update tool, but it at least has has a fix ready to go. The PC maker has released a new version of its Live Update software for laptops that addresses the ShadowHammer backdoor attack. It also promised "multiple security verification mechanisms" to reduce the chances of further attacks, and started using an "enhanced end-to-end encryption mechanism." There are upgrades to the behind-the-scenes server system to prevent future attacks, ASUS added.

The company simultaneously reiterated the narrow scope of ShadowHammer, noting that the malware targeted a "very small and specific user group." It's believed to be an Advanced Persistent Threat -- that is, a state-backed assault against organizations rather than everyday users. Other ASUS devices weren't affected, according to a notice.

While the fix is reassuring, it also raises questions as to why the systems weren't locked down earlier. Update tools are prime targets for hackers precisely because they're both trusted and have deep access to the operating system -- tight security is necessary to prevent an intruder from hijacking the process.”

About the malware https://www.kaspersky.com/blog/shadow-hammer-teaser/26149/

ETA:

How to check your Asus device https://www.asus.com/News/hqfgVUyZ6uyAyJe1

Edited by Arcadia
  • Like 1
Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share

×
×
  • Create New...