214
3 Hardware Trojans in Electronic Devices
the possibility of remote upgrades and installation of the Trojan. According to
specialists, it is “widely used today,” and suitable not for all OS versions.
Huawei Eudemon series firewalls
Eudemon firewalls produced by the Chinese company Huawei are designed for
small and medium companies (series 200) as well as for service providers and large
companies (series 1000). Huawei technology is used around the world in companies
including such European telecommunication giants as O2, Vodafone, and Deutsche
Telekom.
The Trojan HALLUXWATER gives full access to the firewall and the passing
traffic, preserved after rebooting and upgrading the operating system (including the
loading area!).
3.1.4 Wireless Networks
ANT is a department of the NSA, which for many years has been developing
methods to gain access to wireless networks from the outside, allowing its agents to
connect to these networks and distribute their own malware. Trojan NIGHTSTAND,
for example, can remotely introduce data packages for various Windows malware.
SPARROW II Trojan is designed for identification of local wireless networks from
the air. The system is small enough, which makes it possible to install it on an
unmanned aerial vehicle (UAV).
The ASA series is represented by a PIX receiver and designed for enterprises of
various sizes, as well as for corporate data processing centers.
NIGHTSTAND Trojan is a compact mobile system for wireless injection of a
malicious code through certain vulnerabilities of Windows systems using the standard
802.11. According to the specification, it works at a distance of up to 13 km (eight
miles).
SPARROW II Trojan is a means of identification and mapping of wireless
networks—for example, using unmanned aerial vehicles (UAV).
3.1.5 Trojans in Working Servers
As we know, server is a special computer providing availability of data in a company
network or on the Internet. NAS branches develop several hardware and software
Trojans for servers manufactured by Dell and Hewlett Packard. DEITYBOUNCE
software Trojan is installed inside BIOS, at the lowest level of software of Dell
PowerEdge servers. This location ensures functioning of the Trojan aimed at installation of additional spyware, even if the computer is rebooted or the operating system
is reinstalled. It is assumed that hardware Trojans (implants for Dell and HP) servers
Précédent

- 234/839

Suivant