Thursday, March 28, 2024

Hiding a $200 Tiny Malicious Chips Inside IT Equipment to Gain Stealthy Backdoor Access

New research shows how easy to hide a $200 tiny spy Chip inside an IT equipment and to gain backdoor access to the device.

Security researcher Monta Elkins, to demonstrate how he created a proof-of-concept version in the CS3sthlm security conference to happen at the end of this month.

Tiny Spy Chip – Hardware Supply Chain

Last year Bloomberg published a report supply chain attack that how China used a tiny chip to Infiltrate more than 30 U.S. companies including Amazon and Apple.

Now Elkins shows how easy to plant a tiny chip in the hardware supply chain. He intended to demonstrate how an average skilled Cyber criminal can plant a chip in IT equipment to gain stealthy backdoor access, according to Wired article.

With a hot-air soldering tool $150, $40 microscope, and ATtiny85 chip $2 found in the Digispark Arduino board. After adding his code, Elkins desoldered the chip from Digispark Arduino board and soldered it to the motherboard of the Cisco ASA 5505 firewall.

To plant the chip he chose an unnoticeable spot and that would give access to the firewall serial port. He posted an image, which shows how complex it is to spot the chip.

Chip Planted Photo Credits: Elkins

“We think this stuff is so magical, but it’s not that hard. I wanted to make it much more real. It’s not magical. It’s not impossible,” says Elkins. who is working as Hacker-in-Chief at FoxGuard Solutions.

He programmed the chip in the way to carry out attacks as soon the firewall boots up. It imitates the Firewall administrator accessing the configurations by connection the computer through Firewall port.

The chip initiates a password recovery feature and creates a new admin account in the firewall to gain complete access. Once the chip has access to the Firewall settings it disables device security features and provides remote access to the hacker.

“I can change the firewall’s configuration to make it do whatever I want it to do,” Elkins says.

Elkins said that with more reverse engineering, it is possible to change the firmware of the firewall and turn it as a device for spying on the victim’s network.

In the security conference, he is to explain “how he built and installed an implanted chip on an industry-standard firewall, allowing the creation of privileged accounts, network access, and covert notification of successful compromise.”

You can follow us on Linkedin, Twitter, Facebook for daily Cybersecurity and hacking news updates

Website

Latest articles

GoPlus’s Latest Report Highlights How Blockchain Communities Are Leveraging Critical API Security Data To Mitigate Web3 Threats

GoPlus Labs, the leading Web3 security infrastructure provider, has unveiled a groundbreaking report highlighting...

Wireshark 4.2.4 Released: What’s New!

Wireshark stands as the undisputed leader, offering unparalleled tools for troubleshooting, analysis, development, and...

Zoom Unveils AI-Powered All-In-One AI Work Workplace

Zoom has taken a monumental leap forward by introducing Zoom Workplace, an all-encompassing AI-powered...

iPhone Users Beware! Darcula Phishing Service Attacking Via iMessage

Phishing allows hackers to exploit human vulnerabilities and trick users into revealing sensitive information...

2 Chrome Zero-Days Exploited at Pwn2Own 2024: Patch Now

Google has announced a crucial update to its Chrome browser, addressing several vulnerabilities, including...

The Moon Malware Hacked 6,000 ASUS Routers in 72hours to Use for Proxy

Black Lotus Labs discovered a multi-year campaign by TheMoon malware targeting vulnerable routers and...
Guru baran
Guru baranhttps://gbhackers.com
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Mitigating Vulnerability Types & 0-day Threats

Mitigating Vulnerability & 0-day Threats

Alert Fatigue that helps no one as security teams need to triage 100s of vulnerabilities.

  • The problem of vulnerability fatigue today
  • Difference between CVSS-specific vulnerability vs risk-based vulnerability
  • Evaluating vulnerabilities based on the business impact/risk
  • Automation to reduce alert fatigue and enhance security posture significantly

Related Articles