ASUS yatsimikizira kukhalapo kwa backdoor mu Live Update utility

Posachedwa, Kaspersky Lab adavumbulutsa zachilendo za cyber-attack zomwe zikadakhudza pafupifupi miliyoni miliyoni ogwiritsa laputopu ndi makompyuta apakompyuta a ASUS. Kafukufukuyu adawonetsa kuti zigawenga zapaintaneti zidawonjezera chitseko ku chipangizo cha ASUS Live Update, chomwe chimagwiritsidwa ntchito kukonzanso BIOS, UEFI ndi mapulogalamu amabodi ndi ma laputopu a kampani yaku Taiwan. Kutsatira izi, owukirawo adakonza zogawa zosinthidwazo kudzera munjira zovomerezeka.

ASUS yatsimikizira kukhalapo kwa backdoor mu Live Update utility

ASUS yatsimikizira izi pofalitsa nkhani yapadera yokhudzana ndi chiwembuchi. Malinga ndi zomwe wopanga anena, Live Update, chida chosinthira mapulogalamu pazida za kampaniyo, chidali ndi vuto la APT (Advanced Persistent Threat). Mawu akuti APT amagwiritsidwa ntchito m'makampani kutanthauza obera boma kapena, kawirikawiri, magulu achifwamba omwe ali ndi dongosolo lalikulu.

"Zida zocheperako zidayikidwa ndi code yoyipa kudzera pakuwukira kwamphamvu kwa ma seva athu a Live Update poyesa kutsata gulu laling'ono komanso lapadera la ogwiritsa ntchito," ASUS idatero potulutsa atolankhani. "ASUS Support ikugwira ntchito ndi ogwiritsa ntchito omwe akhudzidwa ndikupereka thandizo kuti athetse ziwopsezo zachitetezo."

ASUS yatsimikizira kukhalapo kwa backdoor mu Live Update utility

"Nambala yaying'ono" imatsutsana ndi chidziwitso cha Kaspersky Lab, yomwe idati idapeza pulogalamu yaumbanda (yotchedwa ShadowHammer) pamakompyuta 57. Nthawi yomweyo, malinga ndi akatswiri achitetezo, zida zina zambiri zitha kubedwa.

ASUS inanena m'mawu atolankhani kuti chitseko chakumbuyo chidachotsedwa pamtundu waposachedwa wa Live Update utility. ASUS idatinso idapereka ma encryption okwanira komanso zida zowonjezera zotsimikizira chitetezo kuti ziteteze makasitomala. Kuphatikiza apo, ASUS yapanga chida chomwe chimati chidzatsimikizira ngati dongosolo linalake lawukiridwa, komanso limalimbikitsa ogwiritsa ntchito okhudzidwa kuti alumikizane ndi gulu lake lothandizira.

Zowukirazi akuti zidachitika mu 2018 kwa miyezi yosachepera isanu, ndipo Kaspersky Lab adapeza chitseko chakumbuyo mu Januware 2019.

ASUS yatsimikizira kukhalapo kwa backdoor mu Live Update utility




Source: 3dnews.ru

Kuwonjezera ndemanga