Onion Information
Intel ME rootkits - Seirdy
I know of two Intel ME rootkits that didn’t involve Intel AMT; the latter can be enabled/disabled on “vPro” chips. One rootkit was from 2009 and seems less
Onion Details
Page Clicks: 1
First Seen: 03/11/2024
Last Indexed: 10/21/2024
Onion Content
I know of two Intel ME rootkits that didn’t involve Intel AMT ; the latter can be enabled/disabled on “ vPro ” chips. One rootkit was from 2009 and seems less relevant now; the more recent of the two was by Mark Ermolov and Maxim Goryachy at Black Hat Europe 2017: How to Hack a Turned-Off Computer, or Running Unsigned Code in Intel Management Engine ( application/pdf ) . Without AMT , they required physical access. Most PCs are woefully unprepared against the sorts of attacks enabled by physical access, and ME is only one entry in a long list of issues.