LogoFAIL - ื‘ืึทืคืึทืœืŸ ืื•ื™ืฃ UEFI ืคื™ืจืžื•ื•ืึทืจืข ื“ื•ืจืš ื“ื™ ืกืึทื‘ืกื˜ื™ื˜ื•ืฉืึทืŸ ืคื•ืŸ ื‘ื™ื™ื–ืข ืœืึธื’ืึธืก

ืจืขืกืขืึทืจื˜ืฉืขืจืก ืคื•ืŸ Binarly ื”ืึธื‘ืŸ ื™ื™ื“ืขื ืึทืคื™ื™ื“ ืึท ืกืขืจื™ืข ืคื•ืŸ โ€‹โ€‹ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ืื™ืŸ ื“ื™ ื‘ื™ืœื“ ืคึผืึทืจืกื™ื ื’ ืงืึธื“ ื’ืขื ื™ืฆื˜ ืื™ืŸ UEFI ืคื™ืจืžื•ื•ืึทืจืข ืคื•ืŸ โ€‹โ€‹ืคืึทืจืฉื™ื“ืŸ ืžืึทื ื™ืึทืคืึทืงื˜ืฉืขืจืขืจื–. ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ืœืึธื–ืŸ ืื™ื™ื ืขืจ ืฆื• ื“ืขืจื’ืจื™ื™ื›ืŸ ืงืึธื“ ื“ื•ืจื›ืคื™ืจื•ื ื’ ื‘ืขืฉืึทืก ืฉื˜ื™ื•ื•ืœ ื“ื•ืจืš ืคึผืœื™ื™ืกื™ื ื’ ืึท ืกืคึผืขืฉืœื™ ื“ื™ื–ื™ื™ื ื“ ื‘ื™ืœื“ ืื™ืŸ ื“ื™ ESP (EFI ืกื™ืกื˜ืขื ืคึผืึทืจื˜ื™ื˜ื™ืึธืŸ) ืึธืคึผื˜ื™ื™ืœื•ื ื’ ืึธื“ืขืจ ืื™ืŸ ืึท ื˜ื™ื™ืœ ืคื•ืŸ ื“ื™ ืคื™ืจืžื•ื•ืึทืจืข ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงืŸ ื•ื•ืึธืก ืื™ื– ื ื™ืฉื˜ ื“ื™ื“ื–ืฉืึทื˜ืึทืœื™ ื’ืขื—ืชืžืขื˜. ื“ื™ ืคืืจื’ืขืœื™ื™ื’ื˜ ื‘ืึทืคืึทืœืŸ ืื•ืคึฟืŸ ืงืขื ืขืŸ ื•ื•ืขืจืŸ ื’ืขื ื•ืฆื˜ ืฆื• ื‘ื™ื™ืคึผืึทืก ื“ื™ UEFI Secure Boot ื•ื•ืขืจืึทืคื™ื™ื“ ืฉื˜ื™ื•ื•ืœ ืžืขืงืึทื ื™ื–ืึทื ืื•ืŸ ื™ื™ึทื–ื ื•ื•ืึทืจื’ ืฉื•ืฅ ืžืขืงืึทื ื™ื–ืึทืžื– ืึทื–ืึท ื•ื•ื™ Intel Boot Guard, AMD Hardware-Validated Boot ืื•ืŸ ARM TrustZone Secure Boot.

ื“ืขืจ ืคึผืจืึธื‘ืœืขื ืื™ื– ื’ืขืคึฟื™ืจื˜ ื“ื•ืจืš ื“ืขื ืคืึทืงื˜ ืึทื– ื“ื™ ืคื™ืจืžื•ื•ืึทืจืข ืึทืœืึทื•ื– ืื™ืจ ืฆื• ื•ื•ื™ื™ึทื–ืŸ ื‘ืึทื ื™ืฆืขืจ-ืกืคึผืขืฆื™ืคึฟื™ื˜ืขื“ ืœืึธื’ืึธืก ืื•ืŸ ื ื™ืฆื˜ ื‘ื™ืœื“ ืคึผืึทืจืกื™ื ื’ ืœื™ื™ื‘ืจืขืจื™ื– ืคึฟืึทืจ ื“ืขื, ื•ื•ืึธืก ื–ืขื ืขืŸ ืขืงืกืึทืงื™ื•ื˜ืึทื“ ืื•ื™ืฃ ื“ื™ ืคื™ืจืžื•ื•ืึทืจืข ืžื“ืจื’ื” ืึธืŸ ื‘ืึทืฉื˜ืขื˜ื™ืง ืคึผืจื™ื•ื•ื™ืœืึทื“ื–ืฉืึทื–. ืขืก ืื™ื– ื‘ืืžืขืจืงื˜ ืึทื– ืžืึธื“ืขืจืŸ ืคื™ืจืžื•ื•ืึทืจืข ื›ื•ืœืœ ืงืึธื“ ืคึฟืึทืจ ืคึผืึทืจืกื™ื ื’ BMP, GIF, JPEG, PCX ืื•ืŸ TGA ืคึฟืึธืจืžืึทื˜ื™ืจื•ื ื’ืขืŸ, ื•ื•ืึธืก ื›ึผื•ืœืœ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ื•ื•ืึธืก ืคื™ืจืŸ ืฆื• ื‘ืึทืคืขืจ ืึธื•ื•ื•ืขืจืคืœืึธื• ื•ื•ืขืŸ ืคึผืึทืจืกื™ื ื’ ืคืึทืœืฉ ื“ืึทื˜ืŸ.

ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ื”ืึธื‘ืŸ ืฉื•ื™ืŸ ื™ื™ื“ืขื ืึทืคื™ื™ื“ ืื™ืŸ ืคื™ืจืžื•ื•ืึทืจืข ืกืึทืคึผืœื™ื™ื“ ื“ื•ืจืš ืคืึทืจืฉื™ื“ืŸ ื™ื™ึทื–ื ื•ื•ืึทืจื’ ืกืึทืคึผืœื™ื™ืขืจื– (ื™ื ื˜ืขืœ, ืึทืกืขืจ, ืœืขื ืึธื•ื•ืึธ) ืื•ืŸ ืคื™ืจืžื•ื•ืึทืจืข ืžืึทื ื™ืึทืคืึทืงื˜ืฉืขืจืขืจื– (ืึทืžื™, ื™ื ืกื™ื“ืข, ืคื™ื ื™ืงืก). ื•ื•ื™ื™ึทืœ ื“ื™ ืคึผืจืึธื‘ืœืขื ืงืึธื“ ืื™ื– ืคืึธืจืฉื˜ืขืœืŸ ืื™ืŸ ื“ื™ ืจืขืคึฟืขืจืขื ืฅ ืงืึทืžืคึผืึธื•ื ืึทื ืฅ ืฆื•ื’ืขืฉื˜ืขืœื˜ ื“ื•ืจืš ืคืจื™ื™ึท ืคื™ืจืžื•ื•ืึทืจืข ื•ื•ืขื ื“ืึธืจืก ืื•ืŸ ื’ืขื•ื•ื™ื™ื ื˜ ื•ื•ื™ ื“ื™ ื™ืงืขืจ ืคึฟืึทืจ ืคืึทืจืฉื™ื“ืŸ ื™ื™ึทื–ื ื•ื•ืึทืจื’ ืžืึทื ื™ืึทืคืึทืงื˜ืฉืขืจืขืจื– ืฆื• ื‘ื•ื™ืขืŸ ื–ื™ื™ืขืจ ืคื™ืจืžื•ื•ืึทืจืข, ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ื–ืขื ืขืŸ ื ื™ืฉื˜ ืคืึทืจืงื•ื™ืคืขืจ-ืกืคึผืขืฆื™ืคื™ืฉ ืื•ืŸ ื•ื•ื™ืจืงืŸ ื“ื™ ื’ืื ืฆืข ื™ืงืึธื•ืกื™ืกื˜ืึทื.

ื“ืขื˜ืึทื™ืœืก ื•ื•ืขื’ืŸ ื“ื™ ื™ื™ื“ืขื ืึทืคื™ื™ื“ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ื–ืขื ืขืŸ ืฆื•ื’ืขื–ืื’ื˜ ืฆื• ื–ื™ื™ืŸ ืื ื˜ืคืœืขืงื˜ ืื•ื™ืฃ ื“ืขืฆืขืžื‘ืขืจ 6 ื‘ื™ื™ ื“ื™ Black Hat Europe 2023 ื–ื™ืฆื•ื ื’. ื“ื™ ืคึผืจืขื–ืขื ื˜ื™ืจื•ื ื’ ืื•ื™ืฃ ื“ืขืจ ื–ื™ืฆื•ื ื’ ื•ื•ืขื˜ ืื•ื™ืš ื‘ืึทื•ื•ื™ื™ึทื–ืŸ ืึท ืขืงืกืคึผืœื•ื™ื˜ื™ื™ืฉืึทืŸ ื•ื•ืึธืก ืึทืœืึทื•ื– ืื™ืจ ืฆื• ื•ื™ืกืคื™ืจืŸ ื“ื™ื™ืŸ ืงืึธื“ ืžื™ื˜ ืคื™ืจืžื•ื•ืึทืจืข ืจืขื›ื˜ ืื•ื™ืฃ ืกื™ืกื˜ืขืžืขืŸ ืžื™ื˜ x86 ืื•ืŸ ARM ืึทืจืงืึทื˜ืขืงื˜ืฉืขืจ. ื˜ื›ื™ืœืขืก, ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ื–ืขื ืขืŸ ื™ื™ื“ืขื ืึทืคื™ื™ื“ ื‘ืขืฉืึทืก ื“ื™ ืึทื ืึทืœื™ืกื™ืก ืคื•ืŸ ืœืขื ืึธื•ื•ืึธ ืคื™ืจืžื•ื•ืึทืจืข ื’ืขื‘ื•ื™ื˜ ืื•ื™ืฃ ืคึผืœืึทื˜ืคืึธืจืžืก ืคื•ืŸ ื™ื ืกื™ื“ืข, ืึทืžื™ ืื•ืŸ ืคื™ื ื™ืงืก, ืึธื‘ืขืจ ืคื™ืจืžื•ื•ืึทืจืข ืคื•ืŸ โ€‹โ€‹ื™ื ื˜ืขืœ ืื•ืŸ ืึทืกืขืจ ื–ืขื ืขืŸ ืื•ื™ืš ื“ืขืจืžืื ื˜ ื•ื•ื™ ืคึผืึทื˜ืขื ื˜ืฉืึทืœื™ ืฉืคึผื™ืจืขื•ื•ื“ื™ืง.

ืžืงื•ืจ: opennet.ru

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’