ESET Research discovers vulnerabilities in Lenovo laptops exposing users to risk of UEFI malware installation
www.eset.com
News about ESET's malware research, directly from the maker of legendary NOD32 technology.
  • harc
    1•2 years ago

    luki bezpieczeństwa

    These drivers immediately caught our attention by their very unfortunate (but surprisingly honest) names: SecureBackDoor and SecureBackDoorPeim. After some initial analysis, we discovered other Lenovo drivers sharing a few common characteristics with the SecureBackDoor* drivers: ChgBootDxeHook and ChgBootSmm. As it turned out, their functionality was even more interesting and could be abused to disable UEFI Secure Boot (CVE-2021-3972).

    AAAARGH. Czas przerzucić się na jakiś niszowy hardware w nadziei, że to chociaż podniesie koszta ataku.