The Manila Times

OS This malware is a tough one

- R E I N S TA L L AT I O N , W I P I N G BY IRA JAMES O U T H D D/ S D D W O N ’ T W O R K

Slovakia-based IT security company, ESET, dangerous malware, dubbed LoJax, that infects a targeted computer by re-writing the which is located in the motherboar­d’s flash memory, allowing it to survive even when you wipe/replace your hard disk and re-install your operating system.

UEFI rootkits are extremely dangerous as they are hard to detect and able to survive cybersecur­ity measures such as reinstalla­tion of the operating system or even a hard disk replacemen­t. Moreover, even cleaning a system that was infected with a UEFI rootkit requires knowledge well beyond the reach

Many experts had talked about UEFI rootkits as a theoretica­l attack but ESET was able to detect the first-ever publicly known attacks of this kind which affected several to be a part of a campaign run by the infamous Sednit group.

Sednit, also known as APT28, STRONTIUM, Sofacy or Fancy Bear, is one of the most active Advanced Persistent Threat (APT) groups and has been operating since at least 2004. Allegedly, the Democratic National Committee hack that affected the 2016 US elections, the hacking of global television network TV5Monde, the World Anti-Doping Agency email leak, and many others are believed to be the work of Sednit.

“Although, in theory we were aware that UEFI rootkits existed, organizati­ons who often ignore

 ??  ??

Newspapers in English

Newspapers from Philippines