Hijacked ASUS Live Update software installs backdoors on countless PCs worldwide

[silversurfer]

ASUS releases fix for Live Update tool abused in ShadowHammer attack
 

ASUS Live Update version 3.6.8 contains the aforementioned fixes, the hardware vendor announced in a press release today.
 
The company said ASUS Live Update v3.6.8 "introduced multiple security verification mechanisms to prevent any malicious manipulation in the form of software updates or other means, and implemented an enhanced end-to-end encryption mechanism."
 
ASUS also said it updated and strengthened its "server-to-end-user software architecture to prevent similar attacks from happening in the future."

SOURCE: https://www.zdnet.com/article/asus-relea...er-attack/