Conversation

Compromissed ASUS update servers delivered signed malware to hundreds of thousands of customers in 2018:

https://motherboard.vice.com/en_us/article/pan9wn/hackers-hijacked-asus-software-updates-to-install-backdoors-on-thousands-of-computers

– it is a targeted attack since the malware is only active if your device has certain MAC addresses
– most victims are in Russia, Germany, and France
– technical details, and affected MAC addresses: https://securelist.com/operation-shadowhammer/89992/

#asus #supplychain #attack #malware #update #security #infosec #cybersecurity #shadowhammer