Computers and Technology

Home Computers and Technology

After CIA leak, Intel Security releases detection tool for EFI rootkits

  • LiberalArkie (3575 posts)
    Profile photo of LiberalArkie Donor

    After CIA leak, Intel Security releases detection tool for EFI rootkits

    Intel Security has released a tool that allows users to check if their computer’s low-level system firmware has been modified and contains unauthorized code.

    The release comes after CIA documents leaked Tuesday revealed that the agency has developed EFI (Extensible Firmware Interface) rootkits for Apple’s Macbooks. A rootkit is a malicious program that runs with high privileges — typically in the kernel — and hides the existence of other malicious components and activities.

    The documents from CIA’s Embedded Development Branch (EDB) mention an OS X “implant” called DerStarke that includes a kernel code injection module dubbed Bokor and an EFI persistence module called DarkMatter.

     

    EFI, also known as UEFI (Unified EFI), is the low-level firmware that runs before the operating system and initializes the various hardware components during the system boot process. It’s the replacement for the older and much more basic BIOS in modern computers and resembles a mini operating system. It can have hundreds of “programs” for different functions implemented as executable binaries.

    More

     

    http://www.pcworld.com/article/3179348/security/after-cia-leak-intel-security-releases-detection-tool-for-efi-rootkits.html

    jwirr, ElfinWilde, OzoneTom and 3 othersIchingcarpenter, Hobbit709, ZimInSeattle like this

You must be logged in to reply to this topic.

  • Ferd Berfel (2910 posts)
    Profile photo of Ferd Berfel Donor

    1. i wonder if this removes malware

    Or installs it.  ;-)

    oh yea, paranoid now :roflmao:

    …and you think you’re going to stop this simply by ‘pulling a lever’, in a booth, behind a curtain, every 2 years? Know yourself. And if you need help, call the FBI.
    • leveymg (1753 posts)
      Profile photo of leveymg

      2. Replaces one set of spyware with another. That's peace of mind.

      It’s no secret – there are no secrets.