


This is certainly not the first case of an OEM Backdoor, but it does shine new light on the risks of supply chain security in today's interconnected world of things. Set a BIOS password to deter malicious changes.Disable the "APP Center Download & Install" feature in UEFI/BIOS.Update their firmware to the latest verified version.It is unknown how many computers are infected.Įclypsium recommends that administrators with these affected Gigabit models The vulnerability, which had remained undetected for several months, enabled unauthorized individuals to execute arbitrary code with system privileges, potentially compromising user data and system security. Through their research, They identified suspicious components that turned out to be a backdoor mechanism in the firmware that would eventually download files to infect the Gigabyte App Center - the software used to keep the motherboard updated. The researchers at Eclypsium employed a heuristics approach that involved extensive analysis of the Gigabit App Center software and its behavior. In a recent development, cybersecurity researchers at Eclypsium have identified a concerning backdoor vulnerability within the Gigabyte App Center, a popular software utility utilized by Gigabyte motherboard users.
