Code that hijacks USB device firmware is out in the wild

Stefan Mileschin · 6th October 2014, 08:27

USB devices appear to have a serious security flaw that allows malicious code to be inserted into their firmware. The flaw was first revealed by Karsten Nohl and Jakob Lell at the Black Hat security conference a couple months ago. The two researchers were able to reverse engineer USB firmware, infect it with their own code, and essentially hijack the associated device.

Nohl told Wired that the flaw behind this so-called BadUSB attack "can't be patched" because it exploits "the very way that USB is designed." With the right code, it's reportedly possible to reprogram USB devices simply by plugging them into an infected machine. The malicious code is injected into the USB firmware, making ...

http://techreport.com/news/27152/cod...ut-in-the-wild

6th October 2014, 08:27	#1
Stefan Mileschin [M] Reviewer Join Date: May 2010 Location: Romania Posts: 153,541	Code that hijacks USB device firmware is out in the wild USB devices appear to have a serious security flaw that allows malicious code to be inserted into their firmware. The flaw was first revealed by Karsten Nohl and Jakob Lell at the Black Hat security conference a couple months ago. The two researchers were able to reverse engineer USB firmware, infect it with their own code, and essentially hijack the associated device. Nohl told Wired that the flaw behind this so-called BadUSB attack "can't be patched" because it exploits "the very way that USB is designed." With the right code, it's reportedly possible to reprogram USB devices simply by plugging them into an infected machine. The malicious code is injected into the USB firmware, making ... http://techreport.com/news/27152/cod...ut-in-the-wild

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Intel, Samsung, Others Team Up to Drive Seamless Device-to-Device Connectivity	Stefan Mileschin	WebNews	0	9th July 2014 08:43
Hacker hijacks Synology NAS boxes to mine Dogecoin	Stefan Mileschin	WebNews	0	23rd June 2014 07:46
AMD FX-670K CPU Shows Up in the Wild	Stefan Mileschin	WebNews	0	24th March 2014 10:18
'Dirty USSD' code could automatically wipe your Samsung TouchWiz device	Stefan Mileschin	WebNews	0	26th September 2012 08:13
Intel X25-M G3 SSD Spotted In The Wild	jmke	WebNews	3	31st October 2010 23:31
$88 Android tablet spotted in the wild	jmke	WebNews	0	16th June 2010 19:35
Windows 7 SP1 Beta Spotted In The Wild	jmke	WebNews	0	21st January 2010 10:38
Drive-By Pharming In the Wild	jmke	WebNews	0	25th January 2008 14:27
Wild 'n Wonderful World of CES Exposed	jmke	WebNews	0	7th January 2006 13:28
AMD FX-60s found In the wild	jmke	WebNews	0	13th November 2005 15:12