212
3 Hardware Trojans in Electronic Devices
According to the SPIEGEL catalog, NAS has special Trojans among their applications that are designed to be used in professional routers produced at least by two
manufacturers—Juniper and Huawei. Most likely, there are also additional products
of NAS subdivision for similar devices. These Trojans, according to the catalog,
are installed in BIOS at the lowest software level in every device. It guarantees that
other additional malicious programs can be installed even if a computer is restarted,
or a new operating system is installed. Router models presented in the catalog are
designed to be used by small, medium, and large businesses as well as Internet data
processing centers and mobile providers of phone services.
Huawei routers
Huawei (China) has gained the reputation of one of the world’s largest manufacturers
of network equipment. According to the data of the research company Infonetics, in
2016, Huawei held the second place in the world market in terms of sales of routers
and commutator switches for mobile communication and Internet providers, right
behind Cisco and ahead of Juniper. Many Western telecommunication companies
actively use Huawei hardware, including Deutsche Telekom (Germany).
The Trojan Headwater is an implant for Huawei routers which ensures backdoor
vulnerability in the ROM. The implant is resistant to firmware updates and provides
the possibility of remote control of the device. It helps remotely intercept and analyze
all packets passing through the router.
Juniper routers
Juniper J series routers are designed for connection of servers and tabletop computers
with corporate networks and the Internet.
For example, the SCHOOLMONTANA Trojan is a software implant for Juniper
J series devices resistant to software updates. It is preserved after reloading, router
software updates, and even after physical replacement of the memory card with
firmware.
Juniper M series routers are designed for organization of high-level networks of
large companies and network service providers. They are also used in data processing
centers provided by other corporations and for private clients in order to connect to
the Internet.
The Trojan SIERRAMONTANA is an implant for Juniper M series routers that is
resistant to firmware updates and placed in BIOS. It is also preserved after reloading,
router software updates, and even after physical replacement of the memory card
with firmware.
Juniper T-Series routers, according to the manufacturer, are used by leading
providers of landline communication, mobile, video, and cloud networks.
The STUCCOMONTANA Trojan is an implant for Juniper T-Series routers. It
is a BIOS modification resistant to software updates. It is preserved after reloading,
router software updates, and even after physical replacement of the memory card
with firmware.
3 Hardware Trojans in Electronic Devices
According to the SPIEGEL catalog, NAS has special Trojans among their applications that are designed to be used in professional routers produced at least by two
manufacturers—Juniper and Huawei. Most likely, there are also additional products
of NAS subdivision for similar devices. These Trojans, according to the catalog,
are installed in BIOS at the lowest software level in every device. It guarantees that
other additional malicious programs can be installed even if a computer is restarted,
or a new operating system is installed. Router models presented in the catalog are
designed to be used by small, medium, and large businesses as well as Internet data
processing centers and mobile providers of phone services.
Huawei routers
Huawei (China) has gained the reputation of one of the world’s largest manufacturers
of network equipment. According to the data of the research company Infonetics, in
2016, Huawei held the second place in the world market in terms of sales of routers
and commutator switches for mobile communication and Internet providers, right
behind Cisco and ahead of Juniper. Many Western telecommunication companies
actively use Huawei hardware, including Deutsche Telekom (Germany).
The Trojan Headwater is an implant for Huawei routers which ensures backdoor
vulnerability in the ROM. The implant is resistant to firmware updates and provides
the possibility of remote control of the device. It helps remotely intercept and analyze
all packets passing through the router.
Juniper routers
Juniper J series routers are designed for connection of servers and tabletop computers
with corporate networks and the Internet.
For example, the SCHOOLMONTANA Trojan is a software implant for Juniper
J series devices resistant to software updates. It is preserved after reloading, router
software updates, and even after physical replacement of the memory card with
firmware.
Juniper M series routers are designed for organization of high-level networks of
large companies and network service providers. They are also used in data processing
centers provided by other corporations and for private clients in order to connect to
the Internet.
The Trojan SIERRAMONTANA is an implant for Juniper M series routers that is
resistant to firmware updates and placed in BIOS. It is also preserved after reloading,
router software updates, and even after physical replacement of the memory card
with firmware.
Juniper T-Series routers, according to the manufacturer, are used by leading
providers of landline communication, mobile, video, and cloud networks.
The STUCCOMONTANA Trojan is an implant for Juniper T-Series routers. It
is a BIOS modification resistant to software updates. It is preserved after reloading,
router software updates, and even after physical replacement of the memory card
with firmware.