Respected Apple hacker Pedro Vilaça has uncovered a low-level zero day vulnerability in Mac computers that allows privileged users to more easily install EFI rootkits. Vilaça says the attack, first thought to be an extension of previous research rather …
mac hacker – read more
A team of developers has created a rootkit for Linux systems that uses the processing power and memory of graphics cards instead of CPUs in order to remain hidden.
The rootkit, called Jellyfish, is a proof of concept designed to demonstrate that completely running malware on GPUs (graphics processing units) is a viable option. This is possible because dedicated graphics cards have their own processors and RAM.
Such threats could be more sinister than traditional malware programs, according to the Jellyfish developers. For one, there are no tools to analyze GPU malware, they said.
Also, such rootkits can snoop on the host’s primary memory, which is used by most other programs, via DMA (direct memory access). This feature allows hardware components to read the main system memory without going through the CPU, making such operations harder to detect.
To read this article in full or to leave a comment, please click here
|
Malware Alert: Is 'BadBIOS' Rootkit Jumping Air Gaps?
InformationWeek But does Ruiu's analysis of the BIOS malware — which has been described by some commentators as being more advanced than Stuxnet or Flame — hold water? "I'm not sure what to make of this. When I first read it, I thought it was a hoax," said Bruce … |
 The Guardian |
Researchers reveal new rootkit threat to Android security
Network World NC State researchers say rootkit method ignores the kernel, attacks the framework. Researchers find new malware in Android Ice Cream … |