badBIOS Malware

wes allen

Anyone else following this unfolding story?

Meet

Find more posts tagged with

Save $250 on 2025 certification boot camps from Infosec!

Book now with code EOY2025

Button

Comments

--chris--

Like scifi.

Ultra sonic packet transmission?

ratbuddy

He says they reflashed the BIOS of affected machines, but who's to say the infected BIOS doesn't just spoof success to the flash util..

--chris--

@=ratbuddy
Possible.

Id like to believe in Ultra sonic packet transmission though. It just sounds cooler.

ratbuddy

Ever pick up the phone while someone was on the line with a modem? Just raise the frequencies and put it on speakerphone, and there you go. Easy stuff.

Balantine

Not so easy if the comm is spread out over long periods of time.

I have a lot of questions about the details in this story. Nice entertainment...freaky fah sure.

ratbuddy

Pure entertainment. If the machines really are communicating through audio, it stands to reason that any similar computer has a microphone which could monitor such communications. This guy needs to put up or shut up

tpatt100

The guy is putting the information out there from what I read, it doesn't sound like he is hiding anything.

The story makes me want to throw my computer in a hole in the ground j/k.

vCole

Curious to see how this pans out. I can see how it would work via speakers/mic but how it's nesting itself in he BIOS - I'm just not sure.

the_Grinch

Read a few articles on this just this morning. Personally, I'm a little doubtful on the ultrasonic being used, but it's possible. Interested to see how it all pans out and to see a third party come in to do some testing.

colemic

I find it interesting as well... will have to follow up in a couple of weeks to see where it stands.

gorebrush

Interesting and a lot of it is quite easily feasible but some parts of it just scream BS to me.

Which makes me rather unsure as to the whole stories authenticity.

the_Grinch

Motivation is the biggest cause for alarm since there is a lack of it in this case. Everything happens for a reason and here you don't see it (at least not clearly). Why use something so advanced on this guy? Should be noted though, usually Americans use the USB infection method.

YFZblu

Blog post: The badBIOS Analysis Is Wrong. at RootWyrm's Corner

--chris--

YFZblu wrote: »

Blog post: The badBIOS Analysis Is Wrong. at RootWyrm's Corner

Just came here to post this. Its pretty damning, except I had never seen nor heard of RootWyrm before this either...so who knows.

@YZFblu
Are you on /r/netsec?

YFZblu

I browse /r/netsec, but I've never posted