BadBIOS: Next-gen malware or digital myth?

November 01, 2013

[Ed. note: This story originally stated that it was believed that BadBIOS can infect other machines via ultrasonic audio. Rather, as amended below, it is believed that BadBIOS can communicate with other machines already infected with BadBIOS via ultrasonic audio.]

Security researcher Dragos Ruiu calls it "BadBIOS." According to him, it's a strain of malware that has persisted amongst the machines in his laboratory for almost three years and that has proven near-impossible to clean out. But some parts of his hypothesis about how it's spreading are so strange that even other experts are skeptical.

Ars Technica is reporting in detail about Ruiu's saga, which seems to involve a piece of malware so polymorphic that it seems to be able to spread by infecting everything from a system's BIOS on up.

What's strangest about this malware is that it even seems to be able to communicate with other infected computers that are airgapped -- that is, machines that aren't physically connected to a network.

BadBIOS appears to be OS-agnostic, as Ruiu has found it in Windows, BSD, and OS X machines. Reflashing the BIOS does not appear to help, either. Infected machines refuse to boot from external devices, and any USB drives plugged into a system are also infected -- possibly by way of the USB controller.

BIOS-infecting malware by itself isn't new; one of the first rootkits that infected system BIOSes, Trojan.Mebromi, was discovered back in 2011. But how is it possible that the BIOSes of machines from completely different manufacturers could all be vulnerable to such an attack?

Source: http://www.infoworld.com/t/malware/badbios-next-gen-malware-or-digital-myth-230047
Tags: WWE   Malala Yousafzai   Bobby Cannavale   world trade center   Raz B