Hackers Hijacked ASUS Software Updates to Install Backdoors on Thousands of Computers

Discussion in 'HardForum Tech News' started by DooKey, Mar 25, 2019.

  1. DooKey

    DooKey [H]ard DCOTM x4

    Messages:
    7,872
    Joined:
    Apr 25, 2001
    If you are one of the folks that likes to install the crap that ASUS provides with your motherboard you might just have a nasty backdoor installing malware. According to Kaspersky Labs, via Motherboard, the ASUS servers were hacked last year and the hackers used it to install malware using the software update utility. This could have resulted in as many as a million computers being infected. Consider this a PSA.

    Kaspersky Lab said it uncovered the attack in January after adding a new supply-chain detection technology to its scanning tool to catch anomalous code fragments hidden in legitimate code or catch code that is hijacking normal operations on a machine. The company plans to release a full technical paper and presentation about the ASUS attack, which it has dubbed ShadowHammer, next month at its Security Analyst Summit in Singapore.
     
    Verado, Armenius and Pieter3dnow like this.
  2. Zarathustra[H]

    Zarathustra[H] Official Forum Curmudgeon

    Messages:
    27,653
    Joined:
    Oct 29, 2000
    Sheesh.

    I never ran the Asus utils, preferring to keep things minimal, but there are other utilities I do run (like Logitech's mouse software, etc.)

    Having auto-updates install malware on an otherwise clean system is scary stuff.
     
    Sulphademus likes this.
  3. Master_shake_

    Master_shake_ [H]ardness Supreme

    Messages:
    8,034
    Joined:
    Apr 9, 2012
    the only asus utility i have ever installed was Aura.

    i guess i'm boned.
     
    Armenius likes this.
  4. dvsman

    dvsman 2[H]4U

    Messages:
    2,503
    Joined:
    Dec 2, 2009
    I'm glad I no longer run Asus hardware. The older x99 stuff I had worked great but the newer stuff - just couldn't justify the price difference (brand markup) anymore.
     
  5. techdude01

    techdude01 2[H]4U

    Messages:
    2,993
    Joined:
    Aug 27, 2005
    Well damn...I just recently switched to an Asus mobo. Was feeling good about my new setup until now...
     
  6. Pieter3dnow

    Pieter3dnow [H]ardness Supreme

    Messages:
    6,419
    Joined:
    Jul 29, 2009
    Sometimes the whole software suite seems pretty good and you have to install a program that manages those programs and then you decide to not install any of it :)

    Asus has software that once you installed it it seems to live on even if you uninstalled it. I know I made the mistake as well ;)
     
  7. odditory

    odditory [H]ardness Supreme

    Messages:
    5,016
    Joined:
    Dec 23, 2007
    Good hardware but their bloatware seems to be created by one of those programs where you don't have to write code, and can just drag and drop buttons onto a layout and it makes the program for you.
     
    Sulphademus likes this.
  8. Absalom

    Absalom Gawd

    Messages:
    538
    Joined:
    Oct 3, 2007
    Good Lord. I can only imagine what horrors Gigabytes' software have unleashed.

    Time to do a wipe...

    #killitwithfire
     
    DooKey likes this.
  9. HAL_404

    HAL_404 Limp Gawd

    Messages:
    232
    Joined:
    Dec 16, 2018
    Someone has to have deep pockets to keep all the hackers working and well fed