Solidot: 神秘跨平台病毒badBIOS

Solidot

奇客的资讯，重要的东西

神秘跨平台病毒badBIOS
http://solidot.org.feedsportal.com/c/33236/f/556826/s/332d51e3/sc/21/l/0L0Ssolidot0Borg0Cstory0Dsid0F370A57/story01.htm
Nov 1st 2013, 07:55

三年前，安全顾问、Pwn2Own黑客挑战赛创始人Dragos Ruiu在实验室里注意到一件非同寻常的事情：刚刚全新安装OS X的MacBook Air笔记本自动更新了BIOS固件，之后当他试图从CD ROM启动机器时遭到了拒绝，他还发现机器会不做任何提示删除数据和撤销配置更改。随后几个月，事情越发离奇，仿佛是出自科幻惊悚片：一台运行Open BSD的计算机也开始不做任何提示删除数据和更改配置。他的网络专门通过IPv6传输数据，即使关闭了IPv6协议也没用。最最难以置信的是，拔掉电源线和网线、移除Wi-Fi和蓝牙网卡的被感染机器也能传输网络数据。神秘的BIOS固件病毒badBIOS也能感染Windows和Linux。深入调查分析发现，只有在移除内部扬声器和麦克风之后，抓包工具才发现不再有数据包传输。Ruiu指出，这个恶意程序能利用扬声器和麦克风在计算机之间进行高频传输。badBIOS并不是利用扬声器麦克风传播病毒，而是通过麦克风在被感染机器之间进行通信，就像是彼此之间联网。This entry passed through the Full-Text RSS service — if this is your content and you're reading it on someone else's site, please read the FAQ at fivefilters.org/content-only/faq.php#publishers. Five Filters recommends: Massacres That Matter - Part 1 - 'Responsibility To Protect' In Egypt, Libya And SyriaMassacres That Matter - Part 2 - The Media Response On Egypt, Libya And SyriaNational demonstration: No attack on Syria - Saturday 31 August, 12 noon, Temple Place, London, UK



You are receiving this email because you subscribed to this feed at https://blogtrottr.com

If you no longer wish to receive these emails, you can unsubscribe here:
https://blogtrottr.com/unsubscribe/cz0/jPbdSR