Hiding a $200 Tiny Malicious Chips Inside IT Equipment to Gain Stealthy Backdoor Access

New research shows how easy to hide a $200 tiny spy Chip inside an IT equipment and to gain backdoor access to the device.

Security researcher Monta Elkins, to demonstrate how he created a proof-of-concept version in the CS3sthlm security conference to happen at the end of this month.

Tiny Spy Chip – Hardware Supply Chain

Last year Bloomberg published a report supply chain attack that how China used a tiny chip to Infiltrate more than 30 U.S. companies including Amazon and Apple.

Now Elkins shows how easy to plant a tiny chip in the hardware supply chain. He intended to demonstrate how an average skilled Cyber criminal can plant a chip in IT equipment to gain stealthy backdoor access, according to Wired article.

With a hot-air soldering tool $150, $40 microscope, and ATtiny85 chip $2 found in the Digispark Arduino board. After adding his code, Elkins desoldered the chip from Digispark Arduino board and soldered it to the motherboard of the Cisco ASA 5505 firewall.

To plant the chip he chose an unnoticeable spot and that would give access to the firewall serial port. He posted an image, which shows how complex it is to spot the chip.

Chip Planted Photo Credits: Elkins

“We think this stuff is so magical, but it’s not that hard. I wanted to make it much more real. It’s not magical. It’s not impossible,” says Elkins. who is working as Hacker-in-Chief at FoxGuard Solutions.

He programmed the chip in the way to carry out attacks as soon the firewall boots up. It imitates the Firewall administrator accessing the configurations by connection the computer through Firewall port.

The chip initiates a password recovery feature and creates a new admin account in the firewall to gain complete access. Once the chip has access to the Firewall settings it disables device security features and provides remote access to the hacker.

“I can change the firewall’s configuration to make it do whatever I want it to do,” Elkins says.

Elkins said that with more reverse engineering, it is possible to change the firmware of the firewall and turn it as a device for spying on the victim’s network.

In the security conference, he is to explain “how he built and installed an implanted chip on an industry-standard firewall, allowing the creation of privileged accounts, network access, and covert notification of successful compromise.”

You can follow us on LinkedinTwitterFacebook for daily Cybersecurity and hacking news updates

Gurubaran

Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Recent Posts

LightSpy iOS Malware Enhanced with 28 New Destructive Plugins

The LightSpy threat actor exploited publicly available vulnerabilities and jailbreak kits to compromise iOS devices.…

2 days ago

ATPC Cyber Forum to Focus on Next Generation Cybersecurity and Artificial Intelligence Issues

White House National Cyber Director, CEOs, Key Financial Services Companies, Congressional and Executive Branch Experts…

3 days ago

New PySilon RAT Abusing Discord Platform to Maintain Persistence

Cybersecurity experts have identified a new Remote Access Trojan (RAT) named PySilon. This Trojan exploits…

4 days ago

Konni APT Hackers Attacking Organizations with New Spear-Phishing Tactics

The notorious Konni Advanced Persistent Threat (APT) group has intensified its cyber assault on organizations…

4 days ago

Google Chrome Security, Critical Vulnerabilities Patched

Google has updated its Chrome browser, addressing critical vulnerabilities that posed potential risks to millions…

4 days ago

Notorious WrnRAT Delivered Mimic As Gambling Games

WrnRAT is a new malware attack that cybercriminals have deployed by using popular gambling games…

4 days ago