Shulou(Shulou.com)11/24 Report--

Thanks to CTOnews.com netizen Huanan Wu Yanzu, OC_Formula for clue delivery! CTOnews.com May 9 news, Intel in response to the recent exposure of MSI product leakage incident, said it is investigating private key leakage, and take appropriate measures to provide protection for users, prevent malicious UEFI firmware installation on the device.

The Money Message extortion ring launched an attack on MSI in March this year, stealing 1.5 terabytes of data including firmware, source code and databases.

Money Message demanded that MSI pay a ransom of $4 million (CTOnews.com note: currently about 27.68 million yuan). After being rejected by MSI, the relevant data was released last week.

The researchers dug deeper into the data and found that it included MSI OEM signing keys for Intel Boot Guard.

Intel responded: "Intel BootGuard OEM keys are generated by the system manufacturer, these are not Intel signature keys."

To prevent users from installing malicious firmware, Boot Guard will use the embedded public key built into Intel hardware to verify that the firmware has been validated with a legitimate private signature key.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.