Hacked Supermicro system at United States telecom firm

Security researcher named in China spy chip story voices doubts

A major USA telecom company found manipulated hardware on its network and removed it in August, according at report by Bloomberg on Tuesday.

A major USA telecommunications company discovered manipulated hardware from Supermicro in its network and removed it in August, fresh evidence of tampering in China of critical technology components bound for the U.S., according to a security expert working for the telecom company. Verizon and CenturyLink also denied finding backdoored Supermicro hardware in their datacenters, Motherboard reported.

The chip was reportedly uncovered by security expert Yossi Appleboum, who was hired by the telecommunications company.

Bloomberg posits that Supermicro's own supply chain and factories may be compromised, and that counterintelligence agencies may be involved, which would explain why the Federal Bureau of Investigation is not aware of the issue. Due to the sensitive nature of the disclosure and potential impact on business, Sepio Systems did not reveal the name of the company, but it did describe the mod on the - again - Supermicro motherboard.

The Supermicro backdoor reported Tuesday was also the result of malicious hardware secretly implanted during its manufacture.

Appleboum determined that the telecom company's server was modified at the factory where it was manufactured.

Like Joyce, Jeanette Manfra, DHS's top cybersecurity official, said Wednesday that the department still hasn't found any information that corroborates the Bloomberg report.

'Unusual communications from a Supermicro server and a subsequent physical inspection revealed an implant built into the server's Ethernet connector, a component that's used to attach network cables to the computer, ' the paper reports Appleboum as confirming, citing 'documents, analysis and other evidence of the discovery' provided by Appleboum to its reporters in support of the claim. He said that he was told by Western intelligence contacts that the device was made at a Supermicro subcontractor factory in Guangzhou, a port city in southeastern China.

The tampered hardware was found in a facility that had large numbers of Supermicro servers, and the telecommunication company's technicians couldn't answer what kind of data was pulsing through the infected one, said Appleboum, who accompanied them for a visual inspection of the machine.

Tech, luxury goods lead Wall Street slide
Investors see many of these countries as being vulnerable to higher USA interest rates, which can pull away investment dollars. But historically, a monthly move of one to two deviations, or 20 to 40 basis points now, would result in flat S&P 500 returns.

Joyce appealed to anyone with knowledge of the alleged hardware tampering to contact officials in the NSA, DHS, or Federal Bureau of Investigation.

The pushback against Bloomberg's reporting has been truly extraordinary. Apple and Amazon-both of which typically provide short and vague statements to reporters-offered extremely detailed and vociferous denials.

You can read Apple's letter to Congress in full here.

Unnamed sources from Apple, Amazon, and USA authorities had informed Bloomberg of the presence of the spy chips and a U.S. investigation into the situation.

Besides the denials, critics have also complained that last week's article was based exclusively on anonymous sources who couldn't be adequately scrutinized.

Now, one of the few named sources in the original story - Joe FitzPatrick, a hardware security expert, who is only quoted in relation to a hypothetical scenario where a piece of "hardware opens whatever door it wants" - says he highly doubts the report is accurate. Some in China also noticed it was a standard component - one skeptical article circulating on WeChat was titled (in Chinese), "The "spy chips" that Bloomberg exposed?"

The new story pointing to an Ethernet hack is clearly meant to act as support for the original story but since the details are so different, and given that the entire report is single-sourced, it has had the opposite effect among security experts who have started to doubt the credibility of the original story. "Calling BS on this one as well". We've asked Charter for comment and will let you know if it responds.

Other experts were much more circumspect. Neither adage proves nor disproves the claims of a highly sophisticated supply-chain attack infiltrating the world's most powerful organizations.

Related:

  • AT&T to launch streaming service, latest to counter Netflix

    AT&T to launch streaming service, latest to counter Netflix

    Variety reports that WarnerMedia plans to launch a new streaming service fronted by HBO that will be launched by the end of 2019. Ironically, negotiating terms with CBS would give WarnerMedia a distinct advantage over CBS's own All Access streaming platform.
    Pipeline explosion near Prince George

    Pipeline explosion near Prince George

    The province's Ministry of Environment later confirmed the incident involved a 900 PSI gas line operated by Enbridge. The blast Tuesday shut down the Enbridge natural gas pipeline about 15 kilometres northeast of Prince George .
    Who are Princess Eugenie’s bridesmaids, is Beatrice maid of honour?

    Who are Princess Eugenie’s bridesmaids, is Beatrice maid of honour?

    Meghan places her left hand on Prince Harry's right hand, again showing her engagement ring, as they both look at the photographer.
  • Michael strengthens into Category 2 hurricane

    Michael strengthens into Category 2 hurricane

    The unexpected brute that quickly sprang from a weekend tropical depression grew swiftly, rising in days to a catastrophic storm. Rick Scott warned that the "monstrous hurricane" was just hours away, and his Democratic opponent for the Senate, Sen.
    Tsunami threat as 7.0-magnitude quake hits Papua New Guinea

    Tsunami threat as 7.0-magnitude quake hits Papua New Guinea

    The Pacific Tsunami Warning Centre said that hazardous waves were possible on coasts within 300 km (186 miles) of the epicenter. The International Monetary Fund and its sister lending organisation, the World Bank, are holding annual meetings on Bali .
    Taylor Swift Sets AMAs Record for Most Wins By a Female Artist!

    Taylor Swift Sets AMAs Record for Most Wins By a Female Artist!

    The diva quota will be filled by headliners Jennifer Lopez , Carrie Underwood , Mariah Carey and the ever-provocative Cardi B . The pop star also continued to use her superstar platform to remind everyone to get out and vote .
  • Hurricanes Florence And Michael Highlight Monster Storms' Devastating Differences

    Hurricanes Florence And Michael Highlight Monster Storms' Devastating Differences

    Scott also reported that 2,500 National Guard troops were now active in the state, along with 350 State Troopers backing them up. A Panhandle man was killed by a tree that toppled on a home, Gadsden County Sheriff's Office spokeswoman Anglie Hightower said.
    Google Home Hub is all about simplifying the smart home experience

    Google Home Hub is all about simplifying the smart home experience

    One other pretty significant difference between the Home Hub and other Smart Displays is what's found under the hood. It sports a 7-inch touch screen, a speaker, and far-field microphone array to let you use Google Assistant .
    Hubble Telescope in 'Safe Mode' After Gyro Failure

    Hubble Telescope in 'Safe Mode' After Gyro Failure

    Hubble usually uses three gyros at a time for maximum efficiency, but can continue to make scientific observations with just one. The 28-year-old Hubble Telescope has been key to NASA and independent research of space.
  • US President Trump calls the US Fed 'crazy', stock declines a 'correction'

    US President Trump calls the US Fed 'crazy', stock declines a 'correction'

    Many observers expected that would trigger a sell-off in the stock market as investors flooded their cash into Treasurys. There are a slew of worries for investors which have been building in recent weeks.
    Italy and France far-right leaders slam Brussels 'bunker'

    Italy and France far-right leaders slam Brussels 'bunker'

    Local stocks fell for a third day, with the FTSE-MIB Index of shares sliding as much as 2.5% to the lowest level since April 2017. Salvini heads the League party, one of the two major parties supporting the government of Prime Minister Giuseppe Conte.

    Mental health services for young fail to live up to the promise

    We have commenced the construction of primary health centres across the state to reach all Edo people and residents irrespective of where they reside.

Comments

Latest news

'Worst on record': Hurricane Michael slams Florida with winds up to 250kmh
A total of 453 flights had been cancelled on Wednesday across the country, with many occurring in the Florida area. Michael has been downgraded to a tropical storm as it continues slamming Georgia with heavy rain and unsafe winds.

Meltan Mystery Box announced: new Special Research coming, new videos, new mystery
To open it again, you'll need to wait a set period of time and transfer another Pokemon from your mobile device to your Switch. The Pokemon Company has shared a lot of new information about Meltan and how it can be caught in Pokemon GO .

U.S. Stocks Fall Sharply, Tech Sector Leads Declines
The Dow Jones Industrial Average experienced the third worst point decline in its history Wednesday, falling more than 800 points. Tech stocks declined due to rising bond yields, which followed a spike in rates for the benchmark United States 10-Year Treasury.

Microsoft invests in Southeast Asia's ride-hailer Grab
Microsoft EVP Peggy Johnson told CNBC , "We're fascinated with the companies that are emerging from Southeast Asia". Microsoft's investment in Grab will see the company use Microsoft tech to improve user safety and experience.

U.S. ramps up pressure on Saudis over missing journalist
The Manbij deal between Turkey and the USA focuses on the withdrawal of the YPG from the city in order to stabilize the region. Scarborough stressed that when Trump visited Saudi Arabia a year ago , the Saudi government "made such a fool of him".

'Pokémon Go' adds Sinnoh region critters from 'Diamond' and 'Pearl'
As for how Pokemon will change for battle, CP values will be rebalanced and the gap in HP values between Pokemon will be closer. Stamina values have been adjusted too, allowing players to try and defeat high-defence Pokemon by outlasting them in battle.

Doctor: Expanded HPV vaccination age will save money
Some were leaving marriages or monogamous relationships, expected to begin dating and realized they might be exposed to the virus. In his previous work with female sex workers, he found that the HPV vaccine still provided protection to high-risk groups.

Stardew Valley is coming to iOS and Android
What is unexpected, however, is that Barone specifies that PC gamers can import their save files to the iOS version of the game. Unfortunately, there's no way to sync with your PC-you'll just have to copy the game's data over via iTunes.

CC Sabathia Critical Of Angel Hernandez Following Loss
The Red Sox scored first both nights in Yankee Stadium and will now play in the ALCS for the 11th time in franchise history. Mitch Moreland was again on the bench with hamstring soreness, though Cora said he was available to pinch hit (he didn't).

Company operator of death-crash limo was paid FBI informant
Aref was recently released, but remains in immigration detention pending his deportation to Iraq, according to the Times Union. In more recent years, he was the owner of a low-budget motel, the Crest Inn Suites and Cottages, outside Saratoga Springs.

US Open, PGA victor Koepka voted PGA Tour Player of Year
But Koepka certainly has the inside track, with both Player of the Year awards going to the same player every year since 1992. Open victor in 29 years and then triumphed at the PGA Championship for his third career major title.

Michael grows into Category 1 hurricane south of Gulf states
They also believe that Michael will produce four to eight inches of rain in Western Cuba, with maximum amounts of 12 inches. Many of these areas seeing the downpour of rain could also see life-threatening flash floods, the hurricane center said.

Trump Takes Swipe at Fed as Stocks Tumble
According to Donald Trump, before departing for another campaign event in Iowa: "well, I like to see low interest rates". The criticism is also unusual given that Jerome Powell, the Fed chairman, was appointed by Mr...

Ice shards 15 metres high 'cover' Jupiter's moon
But all the conditions that create penitentes are present on Europa in more extreme fashion, the researchers argued. Sometime in the early 2020s NASA is planning on launching an orbiter to Europa called the Europa Clipper .

Kyrgios beats hasty Shanghai retreat for third year running
He was also fined $US1,500 at the 2015 edition of the tournament after audibly swearing and complaining the event was a "circus" . Doubles great Woodbridge says Kyrgios, who this week lost the top Australian ranking to Alex de Minaur, gets singled out.

Other news