Associate
- Joined
- 15 Jun 2006
- Posts
- 2,178
- Location
- Amsterdam
New virus attacks AMD processors
Proof of concept code shows advanced attack vector
Tom Sanders in California, vnunet.com, 28 Aug 2006
Print : 
Discuss : 
Send to friend : 
Search Jobs
ADVERTISEMENT
Security researchers at Symantec have discovered a new proof of concept virus that targets processors AMD rather than operating systems.
The worm comes in two versions, targeting 32-bit and 64-bit processors from AMD. Symantec refers to the online pests as w32.bounds and w64.bounds. Because it involves proof of concept code, both viruses are rated as low level threats.
Although at this point it concerns harmless proof of concept code, the virus could be used as a starting point for creating malware that affects computers regardless of the operating system that they run, cautioned Vincent Weafer, senior director of Symantec's Security Response Group.
"If I can get to the processor level, potentially I can really start tying myself into the core hardware. I can potentially evade some of the kernel protection and user protection. There is an attraction to virus writers to get to the lowest level possible," Weafer told vnunet.com.
"Once it runs, I've got pretty low level access to that system and I could do pretty well anything that I would want to do."
But there is a big down side because different processors speak what essentially could be seen as different Operating Code (opcode) languages.
"Typically, going down to the opcode level in not effective, because there are too many variants out there and you end up working on not too many machines, " said Weafer.
http://www.computing.co.uk/vnunet/news/2163054/virus-attacks-amd-processors
Proof of concept code shows advanced attack vector
Tom Sanders in California, vnunet.com, 28 Aug 2006
Print : Discuss : Send to friend : Search JobsADVERTISEMENT
Security researchers at Symantec have discovered a new proof of concept virus that targets processors AMD rather than operating systems.
The worm comes in two versions, targeting 32-bit and 64-bit processors from AMD. Symantec refers to the online pests as w32.bounds and w64.bounds. Because it involves proof of concept code, both viruses are rated as low level threats.
Although at this point it concerns harmless proof of concept code, the virus could be used as a starting point for creating malware that affects computers regardless of the operating system that they run, cautioned Vincent Weafer, senior director of Symantec's Security Response Group.
"If I can get to the processor level, potentially I can really start tying myself into the core hardware. I can potentially evade some of the kernel protection and user protection. There is an attraction to virus writers to get to the lowest level possible," Weafer told vnunet.com.
"Once it runs, I've got pretty low level access to that system and I could do pretty well anything that I would want to do."
But there is a big down side because different processors speak what essentially could be seen as different Operating Code (opcode) languages.
"Typically, going down to the opcode level in not effective, because there are too many variants out there and you end up working on not too many machines, " said Weafer.
http://www.computing.co.uk/vnunet/news/2163054/virus-attacks-amd-processors