Researchers: ASUS computers infected by auto-update virus

Combined Shape

BOSTON (AP) — In a sophisticated targeted espionage operation, hackers infected tens of thousands of computers from the Taiwanese vendor ASUS with malicious software using the company’s online automatic update service, security researchers reported Monday.

Kaspersky Lab said it detected 57,000 infections among customers of its antivirus software. It estimates that the exploit likely affected more than 1 million computers from the world’s No. 5 computer company .

The malware was designed to open a “backdoor” for intruders in the infected machines, researchers said.

About 50 percent of the affected Kaspersky anti-virus software customers were in Russia, Germany and France, the company said . The U.S. accounted for less than 5 percent.

A Symantec spokeswoman said about 13,000 of its antivirus customers received the malicious updates.

Trending:
Report: Bidens Aggressively Dodged More Than $500,000 in Taxes Before Joe Demanded Americans Pay Their 'Fair Share'

The so-called supply-chain attack was first reported by the online news site Motherboard.

Kaspersky said the infected software was on ASUS’s Live Update servers from June to November and was signed with legitimate certificates. It did not detect the malware until January, when new capabilities were added to its anti-virus software, the company said.

Kaspersky said its researchers determined that the malware was programmed for surgical espionage when they saw that it was designed to accept a second malware payload for specific computers based on unique identifiers of their network connections. It identified more than 600 computers programmed to receive the payload.

In a blog post and answers to emailed questions, the company said the nature of the second malware payload was unknown because the server that delivered it was no longer active.

Kaspersky said that while is too early to know who was behind the operation, it is consistent with a 2017 incident blamed by Microsoft on a Chinese state-backed group the company calls BARIUM.

ASUS did not immediately respond to two emailed requests seeking comment.

The Western Journal has not reviewed this Associated Press story prior to publication. Therefore, it may contain editorial bias or may in some other way not meet our normal editorial standards. It is provided to our readers as a service from The Western Journal.

Truth and Accuracy

Submit a Correction →






We are committed to truth and accuracy in all of our journalism. Read our editorial standards.

Tags:
Combined Shape
The Associated Press is an independent, not-for-profit news cooperative headquartered in New York City. Their teams in over 100 countries tell the world’s stories, from breaking news to investigative reporting. They provide content and services to help engage audiences worldwide, working with companies of all types, from broadcasters to brands.
The Associated Press was the first private sector organization in the U.S. to operate on a national scale. Over the past 170 years, they have been first to inform the world of many of history's most important moments, from the assassination of Abraham Lincoln and the bombing of Pearl Harbor to the fall of the Shah of Iran and the death of Pope John Paul.

Today, they operate in 263 locations in more than 100 countries relaying breaking news, covering war and conflict and producing enterprise reports that tell the world's stories.
Location
New York City




Conversation