Malware infecting widely used security appliance survives firmware updates

Malware infecting widely used security appliance survives firmware updates

In recent news, it was revealed that a severe malware has been propagating throught the internet and being spread over a widely used security appliance. This back-door type virus has been floating around for some time, and has been discovered to have recently survived its first firmware update, spreading with even greater force to this day.

What makes this particular malware strain so dangerous is its ability to hide itself amongst valid firmware updates and other digital packages, while taking advantage of the extra authenticity such a scenario gives. It was realised the malware has found a way to cling to its host during its implementation of system updates, which allowed it to ‘creep’ into a range of various system processes and applications.

The malware has been identified as a strain of the highly-infectious ‘Ospy’ variety and is capable of holding onto its payload until given a specific signal from the entity behind it.

Once active, the virus has been observed to use packets of information to reach the internet and access network resources, including private servers and data centers. Furthermore, it is believed to be tunneling data through multiple protocols, allowing it to evade detection from conventional antivirus software. Once running, the malware begins to siphon data from affected systems at an alarming rate and is capable of leaving a backdoor open long enough to permit even more advancing malware to exploit it.

To add to the list of concerns, this particular malware strain will most likely be found in other devices. This is because the implementation of firmware updates, which is commonplace in our modern day and age, gives this virus the means to hop across digital media.

Though the source of the malware remains unknown, it is suspected that it is being propagated by malicious actors who are seeking valuable data or access to systems. For this reason, users of the affected security appliance, and systems alike, should ensure they register any visible warning signs of the malware’s activity and address any possible infections as soon as possible.

To protect against the possibility of becoming affected, users are encouraged to practise safe and secure internet behaviours, as well as regularly update their antivirus programs with the most up-to-date version of their applications. Doing this will offer users the best defence against the infection and further emerging variants of the virus.

Hey Subscribe to our newsletter for more articles like this directly to your email. 

Leave a Reply