:Researchers find insecure BIOS 'rootkit' pre-loaded in laptops
Researchers find insecure BIOS 'rootkit' pre-loaded in laptops Aug 6, 2009, 10 :34 UTC (0 Talkback[s]) (6341 reads)
"The biggest problem, Ortega explained, is that a malicious hacker can manipulate and control the call-home process. That’s because the technology uses a configuration method that contains the IP address, port and URL, all hard-coded in the Option-ROM. At first run, Sacco explained that the configuration method is copied in many places, including the registry and hard-disk inter-partition space.
,p>"The duo found that it’s trivial to search and modify the configuration, giving them the ability to point the the IP and URL to a malicious site, where un-authenticated payloads can be directed to laptop."
