死亡飞车

Ring 0级固件威胁：新型UEFI rootkit恶意软件BlackLotus曝光_我的网站

一 |     最近引发广泛讨论的“BlackLotus”，属于一款相当全能的固件级 rootkit 恶意软件。    NEW YORK -- Americans showed their steadfast resilience and kept spending online, at restaurants and other outlets in September even as they grappled with higher prices, rising interest rates and a host of other headwinds piling up.Retail sales rose 0.7% in September, more than twice what economists had expected, and close to a revised 0.8% bump in August, the Commerce Department reported Tuesday. Retail sales in August were inflated after gasoline prices spiked, however. That was not the case in September when gas prices rose more slowly.A closely watched category of retail sales that excludes auto dealers, gas stations and building materials and feeds into the gross domestic product jumped 0.6% last month compared to the prior month.Tuesday's sales figures aren't adjusted for inflation, but the cost of goods barely rose last month, so the increased spending isn't a reflection of higher prices. Prices for durable goods, such as those sold by appliance and electronics stores, actually fell last month.The government’s monthly retail sales report offers only a partial look at consumer spending; it doesn’t include many services, including health care, travel and hotel lodging. But it does cover spending at restaurants, which had a solid 0.9% increase. Spending online rose 1.1% last month, according to the report. Sales at general merchandise stores rose 0.4%. Sales at home furnishings and furniture stores were flat, while electronics stores and outlets that sell building materials saw declines reflecting a difficult housing market. The retail sales report, which reflects the sixth consecutive monthly gain, reinforces the fact that American consumers, as a whole, are showing no signs of pulling back on their spending, which powers most of the economy. That spending comes despite attempts by the Federal Reserve to cool spending and hiring. That's good news heading into the critical holiday shopping season. But the robust sales report also means that the Fed officials could leave the door open for additional rate hikes. That means that shoppers could face higher interest rates for awhile.“If the cost-of-living crisis has hit consumer confidence, you wouldn’t know it judging by a second month of strong retail sales with the consumer buying everything that wasn’t nailed down,” said Christopher S. Rupkey, chief economist at FWDBONDS LLC, a financial markets research company. “Fed officials have another rate hike this year up on their forecast board, and they will need to use it, if the economic data continues to surprise economists on the upside.” Still, questions remain whether shoppers will finally buckle under more bad news piling up from federal budget wrangling, the resumption of student loan repayments, and new global tensions tied to the Oct. 7 surprise attack by Hamas in Israel. The moratorium on student loan payments lifted Oct. 1. Analysts say that shoppers could also become rattled if the Israel-Hamas war is not contained.Moreover, the relentless spending by shoppers also comes at a cost to their household finances.“We have repeatedly under-estimated the U.S. consumer, “ said Tim Quinlan, a senior economist at Wells Fargo Economics. ”But in pulling off this spending spree, consumers have dented their household finances, a theme that is evident not only in the diminished savings, but also the trend rise in credit card delinquencies.”Healthy consumer spending is expected to lift the economy's growth rate to about 3.5% or possibly even higher in the July-September quarter. September's strong sales also suggests the economy may not slow as much in the final three months of the year as previously expected, analysts said. The retail sales report came as businesses across the U.S. economy ramped up hiring in September, defying surging interest rates, and the ongoing threat of a government shutdown. The strength of hiring has surprised economists inside and outside of the Fed. Consumer prices rose 0.4% from August to September, below the previous month’s 0.6% pace. The report from the Labor Department also showed that year-over-year inflation was flat last month from a 3.7% rise in August.Meanwhile, retailers are pulling out discounts and other incentives to get shoppers to open their wallets for the holiday season as they worry about shoppers' finances. Best Buy, the nation's largest consumer electronics retailer, unveiled a new experience that gives shoppers a chance to access some of the biggest deals and cool gadgets of the holiday season. The items, which kicked off late last month, are only available in limited quantities and exclusively through the Best Buy app. ——————AP Economics Writer Christopher Rugaber contributed to this report from Washington.——————Follow Anne D’Innocenzio: http://twitter.com/ADInnocenzio。

二 | 特点是能够躲过各种删除操作，以及绕过先进的 Windows 防护措施。此前这类高级攻击能力，仅被拥有深厚背景的机构所拥有，比如情报威胁组织。然而据报道，一款更新、更强大的 UEFT rootkit，正被人挂到暗网论坛上叫卖。“防护环”示意（图自：Wikipedia / Hertzsprung）卖家宣称 BlackLotus 是一款固件级 rootkit 恶意软件，能够绕过 Windows 防护措施、并在 x86 架构的最底层运行恶意代码。率先曝光此事的安全研究人员指出，单个 rootkit 的许可证费用高达 5000 美元，而后续代码重建则只需 200 美元。

三 | 不过考虑到卖家罗列出来的功能，即使需要耗费重资，世界各地的网络犯罪分子和黑帽黑客也会趋之若鹜。Scott Scheferman 总结道：BlackLotus 采用了汇编与 C 语言编写，体量仅 80KB（约 81920 字节）。通过在内核级别（ring 0）提供‘代理防护’（agent protection），该 rootkit 能够在 UEFI 固件中长期驻留。此外 BlackLotus 具有反虚拟机、反调试和代码混淆功能，以阻碍研究人员对其展开分析尝试，且附带功能齐备的安装指南 / 常见问题解答。黑市叫卖帖与同类 rootkit 一样，BlackLotus 能够在 Windows 启动前的第一阶段被加载，因而能够绕过 Windows / x86 平台上的诸多安全防护措施。除了无视 Secure Boot、UAC、BitLocker、HVCI 和 Windows Defender，该恶意软件还提供了加载未签名驱动程序的能力。其它高级功能包括功能齐备的文件传输模式、以及易攻破的签名引导加载程序 —— 除非影响当今仍在使用的数百个引导加载程序，否则很难将它斩草除根。

四 | Scott Scheferman 还强调了 BlackLotus 可能对基于固件的现代安全防护机制构成威胁。而且新 UEFI rootkit 在易用性、扩展性、可访问性、持久性、规避和破坏潜力方面，都实现了相当大的跨越。

五 | 此前人们一度认为这类威胁相当罕见，但过去几天不断被打脸的攻击报告，已经指向了截然不同的未来趋势。最后，安全社区将对 BlackLotus 恶意软件的实际样本展开更加细致、深入的分析，以确定传闻的真实性、还是说它只是某人精心编造的一个骗局。

Current article:http://www.chenzhuaigecoupuhongyuntuizei.sbs/gk3wyc/20260826/6138394.xlsx

Published on:14:12:49