Items tagged with operation shadowhammer

by Brandon Hill - Tue, Mar 26, 2019

ASUS Releases Fix For Live Update Shadowhammer Backdoor Malware Attack

Yesterday, we reported on a rather alarming security exploit which took advantage of a weakness in the ASUS Live Update utility installed on millions of PCs. Operation ShadowHammer took advantage of Live Update to gain a backdoor to users’ PCs and download malware in the background. ASUS was initially notified of Operation ShadowHammer by Kaspersky Lab on January 31st, but Motherboard reported that the company, “has been largely unresponsive since then and has not notified ASUS customers about the issue.” Well, after widespread coverage of the backdoor yesterday, ASUS has finally issued an official response on its website. The company downplays any widespread... Read more...

by Brandon Hill - Mon, Mar 25, 2019

Massive ASUS Update Software Breach Leaves Thousands Vulnerable To ShadowHammer Backdoor Attack

If you have an ASUS computer that is running the company’s Live Update utility, it’s possible that your system was susceptible to backdoor intrusions during the latter half of 2018. The folks at Kaspersky say that they first discovered the existence of Operation ShadowHammer on January 29th, and has been performing forensic analysis on the security exploit ever since. According to Kaspersky, ASUS Live Update, which is preinstalled on ASUS systems, was compromised, allowing Operation ShadowHammer to propagate between June 2018 and November 2018. ASUS Live Update is intended to allow users to easily update a system’s BIOS/UEFI, drivers and OEM apps. But holes in the software gave... Read more...