Ahmad Rady
زيزوومى مميز
غير متصل
بسم الله والصلاة والسلام علي رسول الله
أما بعد
وصلتني رسالة من موقع Tom's Hardware
موقع معروف وعالمي في تقييم الهاردوير
عنوان رابط في الرسالة
New BIOS Virus Withstands HDD Wipes
معني الكلام
فيروس جديد يصيب البيوس ( BIOS ) يعمل محو للهارد دسك
فتحت الرابط فيه التالي
New BIOS Virus Withstands HDD Wipes
3:21 PM - March 27, 2009 by
Source:
Computer viruses are nasty things. But the nasty just got nastier.
many worst case scenarios, a hard drive wipe is the final solution to ridding a system of an infection. But the absolute worst case scenario is if a virus attacks the BIOS, making detection and cleaning an incredible challenge.
Viruses that target the BIOS aren’t new, but often they are specific to a type of hardware. Researchers have now demonstrated a new type of attack that could install a rootkit on the BIOS of common systems, making it very lethal and effective.
Anibal L. Sacco and Alfredo A. Ortego of Core Security Technologies released a presentation detailing the exploit of this “persistent BIOS infection.” Through the use of a 100-line piece of code written in Python, a rootkit could be flashed into the BIOS and be run completely independent of the operating system.
"We tested the system on the most common types of Bios," said Ortega in a
Flashing a system’s BIOS requires administrative control, but that could first be obtained through a more ‘innocent’ virus that could reside on the hard disk drive. Once an attacker has admin rights, the rootkit could be flashed onto the BIOS and would remain effective even if the original virus on the hard disk were removed. Even a complete format wouldn’t rid the system of the virus.
"You would need to reflash the Bios with a system that you know has not been tampered with," he said. "But if the rootkit is sophisticated enough it may be necessary to physically remove and replace the Bios chip."
There is defense against such an attack, however, as the researchers say that a password or physical lock against BIOS flashes could block the install of the rootkit.
"The best approach is preventing the virus from flashing onto the Bios," said Sacco. "You need to prevent flashing of the bios, even if it means pulling out jumper on motherboard."
مفاد الكلام اللي قلته
ان الفيروس الجديد يصيب البيوس ويعمل محو للبيانات اللي علي الهارد
رجاء اللي عنده معلومات يدلي بها من فضلكم
الرابط
أما بعد
وصلتني رسالة من موقع Tom's Hardware
موقع معروف وعالمي في تقييم الهاردوير
عنوان رابط في الرسالة
New BIOS Virus Withstands HDD Wipes
معني الكلام
فيروس جديد يصيب البيوس ( BIOS ) يعمل محو للهارد دسك
فتحت الرابط فيه التالي
New BIOS Virus Withstands HDD Wipes
3:21 PM - March 27, 2009 by
يجب عليك
تسجيل الدخول
او
تسجيل لمشاهدة الرابط المخفي
Source:
يجب عليك
تسجيل الدخول
او
تسجيل لمشاهدة الرابط المخفي
– Category :
يجب عليك
تسجيل الدخول
او
تسجيل لمشاهدة الرابط المخفي
يجب عليك
تسجيل الدخول
او
تسجيل لمشاهدة الرابط المخفي
Computer viruses are nasty things. But the nasty just got nastier.
many worst case scenarios, a hard drive wipe is the final solution to ridding a system of an infection. But the absolute worst case scenario is if a virus attacks the BIOS, making detection and cleaning an incredible challenge.
Viruses that target the BIOS aren’t new, but often they are specific to a type of hardware. Researchers have now demonstrated a new type of attack that could install a rootkit on the BIOS of common systems, making it very lethal and effective.
Anibal L. Sacco and Alfredo A. Ortego of Core Security Technologies released a presentation detailing the exploit of this “persistent BIOS infection.” Through the use of a 100-line piece of code written in Python, a rootkit could be flashed into the BIOS and be run completely independent of the operating system.
"We tested the system on the most common types of Bios," said Ortega in a
يجب عليك
تسجيل الدخول
او
تسجيل لمشاهدة الرابط المخفي
. "There is the possibility that newer types of Extensible Firmware Interface Bios may be resistant to the attack, but more testing is needed."Flashing a system’s BIOS requires administrative control, but that could first be obtained through a more ‘innocent’ virus that could reside on the hard disk drive. Once an attacker has admin rights, the rootkit could be flashed onto the BIOS and would remain effective even if the original virus on the hard disk were removed. Even a complete format wouldn’t rid the system of the virus.
"You would need to reflash the Bios with a system that you know has not been tampered with," he said. "But if the rootkit is sophisticated enough it may be necessary to physically remove and replace the Bios chip."
There is defense against such an attack, however, as the researchers say that a password or physical lock against BIOS flashes could block the install of the rootkit.
"The best approach is preventing the virus from flashing onto the Bios," said Sacco. "You need to prevent flashing of the bios, even if it means pulling out jumper on motherboard."
مفاد الكلام اللي قلته
ان الفيروس الجديد يصيب البيوس ويعمل محو للبيانات اللي علي الهارد
رجاء اللي عنده معلومات يدلي بها من فضلكم
الرابط
يجب عليك
تسجيل الدخول
او
تسجيل لمشاهدة الرابط المخفي
التعديل الأخير بواسطة المشرف:
