Spyware inside HDD Firmware, How can it be?

[shahij]

Kaspersky claims they detected spyware inside HDD firmware.

How can it be done?

http://redmondmag.com/articles/2015/02/ ... mware.aspx

http://www.reddit.com/r/news/comments/2 ... e_in_hard/

http://www.m-404tech.tk/2015/02/huge-sp ... idden.html

http://www.dailykos.com/story/2015/02/1 ... -Firmware#

[HaQue]

did you read the release from Kaspersky?

look at second link in bcometa's post

[url][/http://forum.hddguru.com/viewtopic.php?f=3&t=30564url]

How can it be done? easy, well if you have the team, budget, and inclination..

1. reverse engineer firmware, or, more likely, steal the sourcecode.
2. write your exploit
3. deploy with a nice zero day.. or even old one.. who patches?
4. wait until your internet veapon is detonated
5. do your pwnage dance

If you read the pdf you will see how

[Alexii]

You will have to do a lot of reverse work. Different models , different families... Any case , IMHO was not done without input from manufacturers. Then again so what , bug Merkels phone ? Check. Collect local and external phone call metadata? Check. Lie about it ? Check =) Whats a little FW backdoors between friends =)