surveillance security scan for pc hacking team

– Update BIOS whenever a security patch is issued. A massive leak of the Italian cyber-surveillance firm Hacking Teams data has revealed that Azerbaijans Ministry of National Security has licensed the companys sophisticated Remote Control System (RCS) spyware, a charge the company had previously explicitly denied. The Trend Micro team advises how to avoid being affected: However, the antivirus firm's researchers do not 'rule out the possibility of remote installation.'

The presentation from the Hacking Team says that the process only works if there is physical access to the victim's PC. The procedure of how the attack is carried out was identified by the research team thanks to a leaked presentation after the 400 GB Hacking Team data breach.įor the malware agent to be installed, three files need to be copied on the victim's PC, namely Ntfs.mod, dropper.mod and Rkloader.mod. This means that even if the user formats the hard disk, reinstalls the OS, and even buys a new hard disk, the agents are implanted after Microsoft Windows is up and running,' stated Trend Micro researchers. 'The dissection of the data from the Hacking Team leak has yielded another critical discovery: Hacking Team uses a UEFI BIOS rootkit to keep their Remote Control System (RCS) agent installed in their targets' systems. In the even the agent was MIA, the software would infect the system again.

This software would check if a victim's system was infected with the malware agent whenever the victim rebooted their PC. The Hacking Team used the UEFI BIOS rootkit to develop a module for the RCS software.

Apparently, the group created a method whereby it was able to infect the UEFI firmware that was developed by Taiwan-based Insyde Software.

Surveillance security scan for pc hacking team