[NW] Hacker Writes Rootkit for Cisco's Routers - Page 2 - Overclock.net

ShamrockMan · 05-16-08

This could be bad as routers have a fair amount of trust on any network, and are in a perfect spot to do some fun things.

Also routers firmware gets updated rarely, if ever (Not uncommon for them to go over a year w/o updates). Ciscos release cycle is every 6 months, and that is only if you have a $$² support contract with them.

aod2002 · 05-16-08

Oh man, this would be horrible if it was released and recoded for various scenarios. The question is, how exactly would it get on your router? Maybe they bind it into a firmware update.

edit: just read this part from article.

Quote:

The software cannot be used to break into a Cisco router -- an attacker would need to have some kind of attack code, or an administrative password on the router to install the rootkit, but once installed it can be used to silently monitor and control the device.

The rootkit runs in the router's flash memory, which contains the first commands that it uses to boot up, said EuSecWest conference organizer Dragos Ruiu.

Quote:

Still, the rootkit comes at a sensitive time for Cisco. Last week, The New York Times reported that the U.S. Federal Bureau of Investigation considers the problem of fake Cisco gear a critical U.S. infrastructure threat.

In late February the FBI culminated a two-year investigation by breaking up a counterfeit Cisco distribution network and seizing an estimated $3.5 million worth of components manufactured in China. According to an FBI presentation on Operation Cisco Raider, fake Cisco routers, switches and cards were sold to the U.S. Navy, the U.S. Marine Corps., the U.S. Air Force, the U.S. Federal Aviation Administration, and even the FBI itself.

Wow, so imagine a big coporation buying a bunch of fake cisco gear that's already been infected with this rootkit. No one would need physical access :-x.

**ENTERPRISE** · 05-16-08

Wow this would be bad if it got out to the general public...which lets face it, it will.

05-16-08	#13 (permalink)
ENTERPRISE FEELING FULL OF WIN Join Date: Oct 2004 Location: Norfolk,UK Posts: 44,201 FAQs Submitted: 11 Folding Team Rank: 552 Hardware Reviews: 16 Trader Rating: 15	Wow this would be bad if it got out to the general public...which lets face it, it will. __________________ Be friendly and polite to your fellow OCN members ! Please lets all FOLD for eachother!. Lets Unite! Fold For The Cause ! Fold For The People For Sale [Global] Nvidia Quadro NVS 280 For Sale [UK] Dell Optiplex SFF System For Sale:[Global] ENTERPRISE'S Clear out sale.

		Overclock.net - Overclocking.net > Industry News > Software News
[NW] Hacker Writes Rootkit for Cisco's Routers

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)