The Chances Of Getting UEFI Based Malware Just Increased

itman · May 8, 2023

The threat actors behind the ransomware attack on Taiwanese PC maker MSI last month have leaked the company's private code signing keys on their dark website.

"Confirmed, Intel OEM private key leaked, causing an impact on the entire ecosystem," Alex Matrosov, founder and CEO of firmware security firm Binarly, said in a tweet over the weekend.

"It appears that Intel Boot Guard may not be effective on certain devices based on the 11th Tiger Lake, 12th Adler Lake, and 13th Raptor Lake."

Present in the leaked data are firmware image signing keys associated with 57 PCs and private signing keys for Intel Boot Guard used on 116 MSI products. The Boot Guard keys from MSI are believed to impact several device vendors, including Intel, Lenovo and Supermicro.

Intel Boot Guard is a hardware-based security technology that's designed to protect computers against executing tampered UEFI firmware.
Click to expand...

https://thehackernews.com/2023/05/msi-data-breach-private-code-signing.html

reasonablePrivacy · May 9, 2023

On the other hand it may be a great chance for coreboot to provide open source firmware

itman · May 10, 2023

While Intel is still investigating the incident, the security industry is bracing itself for years of potential firmware insecurity if the keys indeed were exposed.
The potential leak from MSI Gaming of signing keys for an important security feature in Intel-based firmware could cast a shadow on firmware security for years to come and leave devices that use the keys highly vulnerable to cyberattacks, security experts say.

Intel is still "actively investigating" an alleged leak of Intel Boot Guard private keys for 116 MSI products, the company told Dark Reading. The investigation comes after a claim by Alex Matrosov, CEO of firmware supply chain security platform Binarly, that leaked source code from a March 2023 cyberattack on MSI includes this data, as well as image-signing private keys for 57 MSI products.
Click to expand...

https://www.darkreading.com/attacks...s-could-have-security-repercussions-for-years

Log in or Sign up

The Chances Of Getting UEFI Based Malware Just Increased

itman Registered Member

reasonablePrivacy Registered Member

itman Registered Member

Log in or Sign up

The Chances Of Getting UEFI Based Malware Just Increased

itman Registered Member

reasonablePrivacy Registered Member

itman Registered Member

Useful Searches