Researchers find insecure BIOS ‘rootkit’ pre-loaded in laptops

“The biggest problem, Ortega explained, is that a malicious
hacker can manipulate and control the call-home process. That’s
because the technology uses a configuration method that contains
the IP address, port and URL, all hard-coded in the Option-ROM. At
first run, Sacco explained that the configuration method is copied
in many places, including the registry and hard-disk
inter-partition space. ,p>”The duo found that it’s trivial to
search and modify the configuration, giving them the ability to
point the the IP and URL to a malicious site, where
un-authenticated payloads can be directed to laptop.”

Complete
Story