Comments on: Worm Attacking Industrial Control Systems http://jakob.engbloms.se/archives/1200?&owa_medium=feed&owa_sid= Computer Technology: Simulation, Virtualization, Virtual Platforms, Embedded, Multicore and Multiprocessing (by Jakob Engblom) Thu, 12 Jan 2012 21:54:16 -0800 hourly 1 http://wordpress.org/?v=3.3.1 By: Jakob http://jakob.engbloms.se/archives/1200/comment-page-1#comment-2889 Jakob Thu, 29 Jul 2010 16:52:14 +0000 http://jakob.engbloms.se/?p=1200#comment-2889 ArsTechnica just reported on another embedded vulnerability in automatic teller machines, see http://arstechnica.com/security/news/2010/07/researcher-demonstrates-atm-jackpotting-at-black-hat-conference.ars . ArsTechnica just reported on another embedded vulnerability in automatic teller machines, see http://arstechnica.com/security/news/2010/07/researcher-demonstrates-atm-jackpotting-at-black-hat-conference.ars .

]]> By: Jesper Pettersson http://jakob.engbloms.se/archives/1200/comment-page-1#comment-2884 Jesper Pettersson Thu, 22 Jul 2010 09:23:05 +0000 http://jakob.engbloms.se/?p=1200#comment-2884 Somewhat related is the news that Dell managed to spread a worm infection in their server series motherboard firmware. Of course it only affects Windows users, but to me it's quite astonishing how they can manage to get infected code into their firmware. http://en.community.dell.com/support-forums/servers/f/956/t/19339458.aspx And as a comment to your blog message, any security chain is as weak as its weakest link. Social engineering has been the method of choice for a long time. Several years ago people used prepped USB sticks to install root kits on unpatched Windows 2000 machines exploiting the autorun "feature". Somewhat related is the news that Dell managed to spread a worm infection in their server series motherboard firmware. Of course it only affects Windows users, but to me it’s quite astonishing how they can manage to get infected code into their firmware.

http://en.community.dell.com/support-forums/servers/f/956/t/19339458.aspx

And as a comment to your blog message, any security chain is as weak as its weakest link. Social engineering has been the method of choice for a long time. Several years ago people used prepped USB sticks to install root kits on unpatched Windows 2000 machines exploiting the autorun “feature”.

]]>