The company also tried to downplay the extent of the damage, saying “a small number of devices have been implanted with malicious code through a sophisticated attack on our Live Update servers in an attempt to target a very small and specific user group.”īoth Kaspersky Lab and Symantec estimate that the number of implanted systems might have reached 1 million, if not higher. In fact, it is possible that they would have not gone public with the information if Kaspersky hadn’t. (ASUS says that only the version of Live Update used for notebooks has been affected.) No credit for the researchersĪSUS failed to acknowledge Kaspersky Lab for their work in unearthing the compromise and notifying them.
As part of the settlement, the company committed to establishing and maintaining a comprehensive security program subject to independent audits for the next 20 years.īut it’s uncertain whether ASUS will extend that commitment to cover its computer business. Whether affected users want to put their trust in them again is another matter.Īs a sidenote: in 2016, ASUS settled with the FTC a complaint regarding the poor security of their routers. “This will completely remove the malware from your computer,” the company claims. They have also offered a diagnostic tool users can run to check whether their system has been affected, and advised those who have been saddled with the backdoored version to backup their files and restore the OS to factory settings. At the same time, we have also updated and strengthened our server-to-end-user software architecture to prevent similar attacks from happening in the future,” the company announced.
#DISABLE ASUS LIVE UPDATE VERIFICATION#
3.6.8) of the Live Update software, introduced multiple security verification mechanisms to prevent any malicious manipulation in the form of software updates or other means, and implemented an enhanced end-to-end encryption mechanism.
“ASUS has also implemented a fix in the latest version (ver. ASUS has finally confirmed that its servers were compromised and that its ASUS Live Update tool has been tampered with, as revealed on Monday.
0 kommentar(er)
