One Article Review
| Source |  CSO |
|---|---|
| Identifiant | 5967265 |
| Date de publication | 2022-07-27 03:55:00 (vue: 2022-07-27 11:05:33) |
| Titre | Sophisticated UEFI rootkit of Chinese origin shows up again in the wild after 3 years |
| Texte | A sophisticated rootkit that's able to insert itself into the lowest levels of Windows computers -- the motherboard firmware -- has been making victims since 2020 after disappearing from the radar for around three years. The rootkit, dubbed CosmicStrand by researchers from Kaspersky Lab, is stealthy and highly persistent since its code is stored deep in the UEFI, outside the detection scope of most security programs.The Unified Extensible Firmware Interface (UEFI) is the modern equivalent to the BIOS. It's the firmware that contains the necessary drivers to initialize and configure all hardware components of a computer before the main operating system starts and takes over. While BIOS rootkits used to be a relatively common occurrence many years ago, the UEFI has better security protections, so UEFI malware is relatively rare.To read this article in full, please click here |
| Envoyé | Oui |
| Condensat | 2020 able after again ago all around article been before better bios chinese click code common components computer computers configure contains cosmicstrand deep detection disappearing drivers dubbed equivalent extensible firmware from full hardware has here highly initialize insert interface its itself kaspersky lab levels lowest main making malware many modern most motherboard necessary occurrence operating origin outside over persistent please programs protections radar rare read relatively researchers rootkit rootkits scope security shows since sophisticated starts stealthy stored system takes that three uefi unified used victims wild windows years |
| Tags | Malware |
| Stories | |
| Notes | |
| Move | 
|
L'article ne semble pas avoir été repris aprés sa publication.
L'article ne semble pas avoir été repris sur un précédent.