“Our discovery of these UEFI so-called “secure” backdoors demonstrates that in some cases, deployment of the UEFI threats might not be as difficult as expected, and the larger amount of real-world UEFI threats discovered in the last years suggests that adversaries are aware of this,” he adds. They are executed early in the boot process, before transferring control to the operating system, which means that they can bypass almost all security measures and mitigations higher in the stack that could prevent their operating system payloads from being executed,” says ESET researcher Martin Smolár, who discovered the vulnerabilities. “UEFI threats can be extremely stealthy and dangerous.
Altogether, the list of affected devices contains more than one hundred different laptop models with millions of users worldwide. ESET reported all discovered vulnerabilities to Lenovo in October 2021. Exploitation of these vulnerabilities would allow attackers to deploy and successfully execute UEFI malware either in the form of SPI flash implants like LoJax or ESP implants like our latest discovery ESPecter. BRATISLAVA - ApESET researchers have discovered and analyzed three vulnerabilities affecting various Lenovo laptop models.
0 kommentar(er)
