I-Undercover: abahlaseli baphendule insiza ye-ASUS yaba ithuluzi lokuhlasela okuyinkimbinkimbi

I-Kaspersky Lab ithole i-cyberattack eyinkimbinkimbi ebingaqondisa cishe abasebenzisi abayisigidi bamakhompyutha aphathekayo we-ASUS nawedeskithophu.

Uphenyo luveze ukuthi izigebengu ze-inthanethi zengeze ikhodi enonya ensizeni ye-ASUS Live Update, eletha i-BIOS, i-UEFI nezibuyekezo zesofthiwe. Ngemva kwalokhu, abahlaseli bahlela ukusatshalaliswa kwensiza eguquliwe ngeziteshi ezisemthethweni.

“Insiza, ephenduke iTrojan, yasayinwa ngesitifiketi esisemthethweni futhi yafakwa kuseva yokuvuselela ye-ASUS esemthethweni, eyayivumela ukuthi ihlale isikhathi eside ingabonwa. Izigebengu zize zaqinisekisa ukuthi usayizi wensiza enonya ufana ncamashi nowangempela,” kuphawula uKaspersky Lab.

Ngokunokwenzeka, iqembu le-ShadowHammer, elihlela ukuhlasela okuhlosiwe okuyinkimbinkimbi (APT), lingemuva kwalo mkhankaso we-cyber. Iqiniso liwukuthi, nakuba inani eliphelele lezisulu lingafinyelela esigidini, abahlaseli babenesithakazelo kumakheli athile we-MAC angu-600, ama-hashes awo ayenziwe kanzima abe yizinguqulo ezihlukahlukene zensiza.

“Ngesikhathi siphenya ngokuhlaselwa, sithole ukuthi kwasetshenziswa izindlela ezifanayo ukuthelela isoftware kwabanye abathengisi abathathu. Yebo, sazisa ngokushesha i-ASUS nezinye izinkampani mayelana nokuhlasela, "kusho ochwepheshe.

Imininingwane ye-cyberattack izovezwa ku-SAS Security Conference 2019, eqala ngo-Ephreli 8 eSingapore. 

Source: 3dnews.ru