After five months of the software update released by Asus, Kaspersky Lab has reported that Asus unwittingly pushed out malware through its official updates to around half a million computers after hackers compromised the company’s servers.
The report reveals that the hackers only targeted 600 systems, which were searched for by their unique MAC addresses. The attack has been dubbed as a supply-chain attack where malware gets installed in systems through trusted vendor channels. US-based security firm Symantec also confirmed the incident.
Symantec has confirmed that at least 13,000 computers of its customers were affected by the malicious software update from Asus last year. The company is still investigating the actual number of its computers that have been affected.
Kaspersky also reported that the malware is found in over 57,000 computers of their customers until date. To carry out the attack, hackers used two different ASUS digital certificates for signing their malware. The second certificate was used after the first expired in mid-2018.
See What’s Next in Tech With the Fast Forward Newsletter
Tweets From @varindiamag
Nothing to see here - yet
When they Tweet, their Tweets will show up here.
