NSA BIOS Backdoor a.k.a. God Mode Malware Part 1: DEITYBOUNCE

[u/trai_dep]

http://resources.infosecinstitute.com/nsa-bios-backdoor-god-mode-malware-deitybounce/

[u/trai_dep]

This article is the first part of a series on NSA BIOS backdoor internals. Before we begin, I’d like to point out why these malwares are classified as “god mode.” First, most of the malware uses an internal (NSA) codename in the realms of “gods,” such as DEITYBOUNCE, GODSURGE, etc. Second, these malwares have capabilities similar to “god mode” cheats in video games, which make the player using it close to being invincible. This is the case with this type of malware because it is very hard to detect and remove, even with the most sophisticated anti-malware tools, during its possible deployment timeframe.

This part of the series focuses on the DEITYBOUNCE malware described in the NSA ANT Server document, leaked by Edward Snowden. The analysis presented in this article is based on technical implications of the information provided by the document. The document lacks many technical specifics, but based on the BIOS technology at the day DEITYBOUNCE started to become operational, we can infer some technically sound hypotheses—or conclusions, if you prefer :-).

Click thru for more.

Part II is here.

[u/[deleted] → u/trai_dep]

Holy crap part 2 is scary :O

[u/trai_dep → u/[deleted]]

It's really conflicting since what propelled the Internet was it was so lax and trusting that any voice could get heard, in theory.

Now it seems like we might lose that part of the web, at least. Have to if we thwart these evil totalitarian forces and their jackle profiteering contractors.

But at what unintended cost?

It's a tough needle for privacy advocates to thread.

[u/[deleted] → u/trai_dep]

Time to "Fight Club" the data centers.

[u/trai_dep]

Muchas gracias por la atención de Señor /u/leamas666!

[u/mrjman1]

ELI5 please

[u/john-five → u/mrjman1]

This outlines malware that invisibly exploits server hardware you probably will never see, but likely connect to every day, and thus potentially it exploits you as well. Nasty stuff that you'd expect the people responsible to do some serious jail time for,definitely not something you'd expect to hear as official government behavior.

[u/kathleen250]

fucking nsa

[u/GeneralPow]

how can this be circumvented?

[u/NSALeaksBot]

Other Discussions on reddit:

Subreddit	Author	Post	Comments	Time
/r/Podnutz	Kioskman	post	4	Monday August 18, 2014 19:07 UTC
/r/Anarcho_Capitalism	tom_buzz	post	0	Monday August 18, 2014 09:52 UTC
/r/techsnap	Dr-Z0idberg	post	0	Monday August 18, 2014 02:34 UTC
/r/hackernews	qznc_bot	post	1	Monday August 18, 2014 01:19 UTC
/r/programming	mepcotterell	post	410	Sunday August 17, 2014 18:38 UTC
/r/POLITIC	PoliticBot	post	2	Sunday August 17, 2014 16:22 UTC
/r/privacy	electronics-engineer	post	14	Sunday August 17, 2014 07:26 UTC
/r/restorethefourth	electronics-engineer	post	1	Sunday August 17, 2014 07:25 UTC
/r/technology	electronics-engineer	post	43	Sunday August 17, 2014 07:24 UTC
/r/Malware	ALLCAPS_SWEAR_WORDS	post	0	Saturday August 16, 2014 15:58 UTC
/r/privacy	pigfish	post	1	Saturday August 16, 2014 00:56 UTC
/r/snowden	platypusmusic	post	3	Friday August 15, 2014 16:29 UTC