Saturday, April 19, 2025
HomeCyber Security NewsHiding a $200 Tiny Malicious Chips Inside IT Equipment to Gain Stealthy...

Hiding a $200 Tiny Malicious Chips Inside IT Equipment to Gain Stealthy Backdoor Access

Published on

SIEM as a Service

Follow Us on Google News

New research shows how easy to hide a $200 tiny spy Chip inside an IT equipment and to gain backdoor access to the device.

Security researcher Monta Elkins, to demonstrate how he created a proof-of-concept version in the CS3sthlm security conference to happen at the end of this month.

Tiny Spy Chip – Hardware Supply Chain

Last year Bloomberg published a report supply chain attack that how China used a tiny chip to Infiltrate more than 30 U.S. companies including Amazon and Apple.

- Advertisement - Google News

Now Elkins shows how easy to plant a tiny chip in the hardware supply chain. He intended to demonstrate how an average skilled Cyber criminal can plant a chip in IT equipment to gain stealthy backdoor access, according to Wired article.

With a hot-air soldering tool $150, $40 microscope, and ATtiny85 chip $2 found in the Digispark Arduino board. After adding his code, Elkins desoldered the chip from Digispark Arduino board and soldered it to the motherboard of the Cisco ASA 5505 firewall.

To plant the chip he chose an unnoticeable spot and that would give access to the firewall serial port. He posted an image, which shows how complex it is to spot the chip.

Chip Planted Photo Credits: Elkins

“We think this stuff is so magical, but it’s not that hard. I wanted to make it much more real. It’s not magical. It’s not impossible,” says Elkins. who is working as Hacker-in-Chief at FoxGuard Solutions.

He programmed the chip in the way to carry out attacks as soon the firewall boots up. It imitates the Firewall administrator accessing the configurations by connection the computer through Firewall port.

The chip initiates a password recovery feature and creates a new admin account in the firewall to gain complete access. Once the chip has access to the Firewall settings it disables device security features and provides remote access to the hacker.

“I can change the firewall’s configuration to make it do whatever I want it to do,” Elkins says.

Elkins said that with more reverse engineering, it is possible to change the firmware of the firewall and turn it as a device for spying on the victim’s network.

In the security conference, he is to explain “how he built and installed an implanted chip on an industry-standard firewall, allowing the creation of privileged accounts, network access, and covert notification of successful compromise.”

You can follow us on Linkedin, Twitter, Facebook for daily Cybersecurity and hacking news updates

Gurubaran
Gurubaran
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Latest articles

How SMBs Can Improve SOC Maturity With Limited Resources

Small and Medium-sized Businesses (SMBs) have become prime targets for cybercriminals, being three times...

How To Detect Obfuscated Malware That Evades Static Analysis Tools

Obfuscated malware presents one of the most challenging threats in cybersecurity today. As static...

How Security Analysts Detect and Prevent DNS Tunneling Attack In Enterprise Networks

DNS tunneling represents one of the most sophisticated attack vectors targeting enterprise networks today,...

How to Conduct a Cloud Security Assessment

Cloud adoption has transformed organizations' operations but introduces complex security challenges that demand proactive...

Resilience at Scale

Why Application Security is Non-Negotiable

The resilience of your digital infrastructure directly impacts your ability to scale. And yet, application security remains a critical weak link for most organizations.

Application Security is no longer just a defensive play—it’s the cornerstone of cyber resilience and sustainable growth. In this webinar, Karthik Krishnamoorthy (CTO of Indusface) and Phani Deepak Akella (VP of Marketing – Indusface), will share how AI-powered application security can help organizations build resilience by

Discussion points


Protecting at internet scale using AI and behavioral-based DDoS & bot mitigation.
Autonomously discovering external assets and remediating vulnerabilities within 72 hours, enabling secure, confident scaling.
Ensuring 100% application availability through platforms architected for failure resilience.
Eliminating silos with real-time correlation between attack surface and active threats for rapid, accurate mitigation

More like this

How SMBs Can Improve SOC Maturity With Limited Resources

Small and Medium-sized Businesses (SMBs) have become prime targets for cybercriminals, being three times...

How To Detect Obfuscated Malware That Evades Static Analysis Tools

Obfuscated malware presents one of the most challenging threats in cybersecurity today. As static...

How Security Analysts Detect and Prevent DNS Tunneling Attack In Enterprise Networks

DNS tunneling represents one of the most sophisticated attack vectors targeting enterprise networks today,...