Hackers Backdoor Cloud Servers to Attack Future Customers

guest · Feb 26, 2019

Hackers Backdoor Cloud Servers to Attack Future Customers
February 26, 2019
https://www.bleepingcomputer.com/ne...oor-cloud-servers-to-attack-future-customers/

A new vulnerability dubbed Cloudborne can allow attackers to implant backdoor implants in the firmware or BMC of bare metal servers that survive client reassignment in bare metal and general cloud services, leading to a variety of attack scenarios.

While this generally means that an organization's critical apps are always running on dedicated servers, the fact that those servers are reclaimed and re-assigned once the client no longer needs them exposes them to firmware weaknesses and vulnerabilities that can persist between customer assignments.

IBM published details about the vulnerability on February 25 stating that:

On some system models offered by IBM Cloud and other cloud providers, a malicious attacker with access to the provisioned system could overwrite the firmware of the BMC. The system could then be returned to the hardware pool, where the compromised BMC firmware could then be used to attack the next user of the system.
Click to expand...

mirimir · Feb 26, 2019

Damn. I don't even know how to reflash firmware on servers that I lease Maybe I ought to look into that. Or maybe ask providers to reflash when I start leases.

Log in or Sign up

Hackers Backdoor Cloud Servers to Attack Future Customers

guest Guest

mirimir Registered Member

Log in or Sign up

Hackers Backdoor Cloud Servers to Attack Future Customers

guest Guest

mirimir Registered Member

Useful Searches