behind. @mxhdrm - Tumblr Blog

a summary of BadBios by "Cyber-son"

badBIOS, Weapons-grade malware, facts, speculation and misunderstandings

#bad bios #security #virus #critial watch

as a result, the anti-theft agent allows a highly persistent and stealth form of rootkit that can re-utilize many existing features that come pre-installed in BIOS firmware and can survive operating system reinstallation and hard disk wiping or replacement

For instance, you can turn on auto-answer, using the Hayes command set.

#cell #baseband #gsm #phone #telecom

Believe it or not, RAR files can contain bytecode for a simple x86-like virtual machine called the RarVM.

What is the most commonly used bytecode language in the world? Java (JVM Bytecode)? .NET (CLI)? Flash (AVM1/AVM2)? Nope. There’s a few that you use every day, simply by turning on your computer, or tablet, or even phone. You don’t even have to start an application or visit a webpage.

#bytecode #acpi #truetype #font

"...and that could be done by writing a certain magic string the firmware hack would look for to the disk. The magic string can be in any file; the attacker could for example upload a .jpeg-file with the string in it to the server. He could also request a file from the webserver with the magic string appended to the URL. That would eventually end up in the logs of the machines, triggering the exploit."

video: http://spritesmods.com/?art=hddhack&page=6

#firmware #vuln #hdd