nsm0220 Posted March 18, 2014 ID:804773 Share Posted March 18, 2014 btw whats happening to rootkits lately because i haven't seeing any of them lately Link to post Share on other sites More sharing options...
David H. Lipman Posted March 19, 2014 ID:804795 Share Posted March 19, 2014 LOL - Like you should be seeing them like cars on the street. Link to post Share on other sites More sharing options...
blackdove83 Posted March 20, 2014 ID:805395 Share Posted March 20, 2014 If you read the right security blogs youll find that there are millions of infected computers with rootkits being used in botnets or for espionage currently. Its actually a pretty massive problem. Its the type of malware that worries me the most. The kind that require motherboard or HDD replacement especially. Link to post Share on other sites More sharing options...
David H. Lipman Posted March 20, 2014 ID:805399 Share Posted March 20, 2014 The kind that require motherboard or HDD replacement especially. That's FUD as that's just not the case due to the rarity of occurrences. Link to post Share on other sites More sharing options...
Mateotis Posted March 20, 2014 ID:805469 Share Posted March 20, 2014 btw whats happening to rootkits lately because i haven't seeing any of them lately That means they're doing their job perfectly. Link to post Share on other sites More sharing options...
blackdove83 Posted March 20, 2014 ID:805598 Share Posted March 20, 2014 Hardware based bootkits and rootkits being the worst is FUD? Theyre uncommon but definitely the worst kind of rootkit since you cant get rid of them by reformatting and if its in the BIOS even a new HDD wont help. Link to post Share on other sites More sharing options...
John L. Galt Posted March 20, 2014 ID:805603 Share Posted March 20, 2014 Sigh. Link to post Share on other sites More sharing options...
David H. Lipman Posted March 20, 2014 ID:805614 Share Posted March 20, 2014 The kind that require motherboard or HDD replacement especially. That's the FUD. As for motherboards there have been the Chernobyl and copy cats that have corrupted the BIOS. That may have created a a non-booting motherboard. What I would refer to as an impotent motherboard. Replacing the PROM or reprogramming the PROM could fix "some" of them and that wasn't a result of a RootKit. It was a trojan with some viral aspects. However one can disable BIOS updating either in the BIOS or setting a motherboard jumper and that could mitigate that situation. That was years ago and we are not seeing new ones. Yes there was a Chinese situation where a malicious BIOS routine was inserted but that was very isolated and quite specific in scope. If anyone replaces a hard disk because of ANY malware its because they just don't know any better. The statement made was FUD and needs a disclaimer and refuting. People should be in more fear of Banker/Bancos, data stealers and backdoor trojans used in data exfiltration and identity theft. They are the real scary ones as they are way too prevalent and can have devastating and long term consequences. Link to post Share on other sites More sharing options...
blackdove83 Posted March 23, 2014 ID:806943 Share Posted March 23, 2014 Ring -1 rootkits are uncommon but they are the worst. Are you saying theres never a time to replace a HPA infected HDD? Link to post Share on other sites More sharing options...
David H. Lipman Posted March 23, 2014 ID:806948 Share Posted March 23, 2014 Yes. Link to post Share on other sites More sharing options...
John L. Galt Posted March 24, 2014 ID:807000 Share Posted March 24, 2014 Think about it this way. If the rootkit can write to any area, then another utility can also write to / erase from said area. If nothing else, there are literally tens of tools for attempting low level formats are HDDGuru alone, and I cannot remember the last time I used a BIOS update tool that did not first erase the existing BIOS bits before writing the new BIOS bits. I'm talking both for computer BIOS as well as for GA (Graphic Accelrators) BIOS. Link to post Share on other sites More sharing options...
Durew Posted April 5, 2014 ID:813800 Share Posted April 5, 2014 Just so I get my vocabulary right: FUD stands here for "Fear, Uncertainty and Doubt" and not "Fully UnDetectable"? Link to post Share on other sites More sharing options...
David H. Lipman Posted April 5, 2014 ID:813802 Share Posted April 5, 2014 Yes, the former not the latter. Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now