
“Dubbed ‘Thunderstrike 2,’ the new proof-of-concept attack still spreads primarily through infected Thunderbolt accessories. But where the original Thunderstrike required a malicious user to have physical access to your computer to work—something sometimes referred to as an ‘evil maid’ attack—the new one can be spread remotely. The malware can be delivered ‘via a phishing e-mail and malicious Web site,’ and once downloaded it can infect connected accessories that use Option ROM (Apple’s Thunderbolt-to-gigabit-Ethernet accessory is a commonly cited example). Once the accessory is infected, the malware can spread to any Mac that you plug the accessory into.”
Related posts:
Under the Microscope: The Real Costs of a Dollar
Speed Cameras Tear Apart Ohio Town
Washington bar opens its doors to pot smokers
Bill Bonner: An Empire of Debt Leading to a "Crack-up" in the Global Monetary System
US nuclear arsenal upgrade to exceed $1 trillion
Silk Road supporters are trolling the FBI with Bitcoin
France's President Hollande: Eradicate tax havens
The Soviet Setup is Now the China Setup
Mexico's audit office tells Bank of Mexico to verify gold held at Bank of England
No Place to Hide: We’re All Suspects in Barack Obama’s America
Swiss banking chief tries to quell clamor about gold
Veterans struggle with benefit claims thanks to missing war records
Backups for “Missing” Lois Lerner IRS Emails Exist; Gov't Won't Retrieve
California Gov. Brown tells the Obama administration to back off on marijuana
Fed Still on Red Alert