Notebookcheck

Asus releases patch to fix Operation ShadowHammer vulnerability in Live Update Utility

In response to the massive media attention around Operation ShadowHammer yesterday, Asus has released a fix for the affected software (Asus Live Update Utility) to patch the security holes used in the attack. The company also released a tool that allows users to check their systems for any traces of the malware. Links to both the online tool and instructions on updating the Live Update Utility are included below.

In response to the media firestorm concerning Operation ShadowHammer, a major attack affecting tens of thousands of users, Asus has released a patch to fix a security flaw in their Live Update Utility software.

Several media outlets (including Notebookcheck) reported on a large-scale attack carried out by an advanced persistent threat (APT) that targeted Asus-made computers. The attack, named “Operation ShadowHammer,” used authentic Asus software certificates to install malware on at least 57,000 systems worldwide and passed undetected for months.

Security research firm Kaspersky Labs discovered the threat in January and notified Asus of the attack on January 31st and February 14th. Kaspersky said that Asus was “largely unresponsive.”

The media surge seems to have caught Asus’ attention. Earlier today, the Taiwanese OEM released a post stating that they have updated the Live Update Utility software to patch the security vulnerability used in Operation ShadowHammer. The fix is now included in version 3.6.8. Users can update the Live Update Utility by following the directions enumerated here.

Asus also released an online tool for users to check their system for any compromises. That tool can be found here.

Working For Notebookcheck

Are you a techie who knows how to write? Then join our Team! Especially English native speakers welcome!

Currently wanted: 
News and Editorial Editor - Details here

Source(s)

static version load dynamic
Loading Comments
Comment on this article
Please share our article, every link counts!
> Notebook / Laptop Reviews and News > News > News Archive > Newsarchive 2019 03 > Asus releases patch to fix Operation ShadowHammer vulnerability in Live Update Utility
Sam Medley, 2019-03-26 (Update: 2019-03-26)
Sam Medley
Sam Medley - Review Editor - @samuel_medley
I've been a "tech-head" my entire life. After graduating college with a degree in Mathematics, I worked in finance and banking a few years before taking a job as a Systems Analyst for my local school district. I started working with Notebookcheck in October of 2016 and have enjoyed writing news articles and notebook reviews. My areas of interest include the business side of technology, retro gaming, Linux, and innovative gadgets. When I'm not hunched over an electronic device or writing code for a new database, I'm either outside with my family, playing a decade-old video game, or sitting behind a drum set.