HP Advertorial

Conten width:260px + 10px padding left + 10px padding right
Max height: 2000px

« PC World pirated | Main | ComCom foils Telecom plot to slow down DSL »

Symantec reckons it has found two new proof of concept worms that "attack AMD processors" rather than Windows as usual.

45overhead_E.JPG

It's not completely correct to say that the malware in question attacks processors, but this quote from Vincent Weafer, senior director of Symantec's Security Response Group, illustrates the danger:

"If I can get to the processor level, potentially I can really start tying myself into the core hardware. I can potentially evade some of the kernel protection and user protection. There is an attraction to virus writers to get to the lowest level possible," Weafer told vnunet.com.

In other words, anti-viruses may not be able to detect such a virus, as it is able to hide in hardware. Such a virus would also evade Microsoft's kernel security enhancements on Vista, and virus writers could conceivably target any operating system this way.

Presently, the proof-of-concept worms that Symantec have found, w32.bounds and w64.bounds (for 32 and 64 bit processors respectively) are rated as low risk and harmless. They infect Windows executables only currently.

This development is quite ironic, as AMD has made rather a song and dance about the virus protection in its processors.

With both AMD and Intel looking at hardware-based security solutions, it's no surprise that malware writers are heading in that direction too.

Security is indeed a moving target...

Post a comment

Subscribe
Newsletter & SubscriptionsPC World is New Zealand’s top selling computing and technology magazine.

It provides up-to-the-minute editorial, insight and buying advice for personal computing, cell phones, game consoles, digital entertainment and broadband.
SIGN UP
PCWorldUpdate
PC World's fortnightly round-up of tech news, gear and game reviews, software selections, and handy How Tos.