You may be a victim for ShadowHammer hack, here is the complete list of the MAC Address, tool to check for infection and the update to resolve the issues.
Operation ShadowHammer targeted the ASUS computers software update tool to inject a backdoor. The attack found to be active since June to November 2018 and it was discovered in January 2019.
Attackers performed a sophisticated supply chain attack by compromising the company’s server and infect the user’s computer directly with the malware through automatic software update utility. You can read more about ShadowHammer hack here.
In total, researchers identified more than 600 MAC addresses hard-coded into the malware. Kaspersky launched a free tool to check that your device is infected or not.
Just need to enter your device MAC address and click on check now, if your device is affected then the screen turns red and show a warning “Your device has been affected by the ShadowHammer attack”.
Skylight published the full list of the MAC addresses that targeted in the ASUS breach. They extracted the code form disassembled the code.
“we thought it would be a good idea to extract the list and make it public so that every security practitioner would be able to bulk compare them to known machines in their domain.”
Here you can find the complete list of the complete devices MAC address that affected in ShadowHammer hack.
ASUS published updates to help in protecting the devices, users are recommended to update with V3.6.8 or higher version to resolve security issues.
If the auto upgrade of ASUS Live Update fails, you can download the latest version of tool form ASUS website and install manually.
You can follow us on Linkedin, Twitter, Facebook for daily Cybersecurity updates also you can take the Best Cybersecurity courses online to keep your self-updated.
Microsoft Released Security Updates that Fixes 64 Vulnerabilities Including 2 Active Zero-day Flaw
Microsoft Advises Users to Stop Using Internet Explorer Browser
Attackers abused compromised ConnectWise Cloud Backup credentials to access Microsoft 365 customer environments, prompting ConnectWise…
Anthropic says an internal Claude research model reconstructed how the National Security Agency generated seeds…
Two WordPress Core vulnerabilities can be chained to execute remote code without authentication, according to…
A newly disclosed OpenBSD kernel exploitation chain combines a shared memory accounting flaw with a…
GhostAction attackers have expanded their GitHub credential theft campaign with a second stage that disguises…
Indian authorities have warned that SideCopy hackers are targeting Indian organizations, including academic institutions, with…