Source: Daniel Rubino / Windows Central
What you need to know
- A newly discovered malware is targeting Windows workstations, industrial control systems, and data acquisition devices.
- Threat actors utilize a known vulnerability in an ASRock-signed motherboard driver to infiltrate IT and OT systems.
- Once an IT or OT system is successfully attacked, threat actors can laterally work through a network to target other systems.
Windows workstations are under threat from a newly discovered type of malware. According to a joint cybersecurity advisory by the Department of Energy (DOE), the Cybersecurity and Infrastructure Security Agency (CISA), the National Security Agency (NSA), and the Federal Bureau of Investigation (FBI), the malware can compromise Windows-based engineering workstations. The same malware is also a threat to industrial control systems and data acquisition devices.
Since Windows-based workstations are often used by IT departments and security admins, being compromised presents a security risk to a wide range of devices. Threat actors could move laterally through a network if they gained access to systems with certain privileges.
"The actors can compromise Windows-based engineering workstations, which may be present in information technology (IT) or OT environments, using an exploit that compromises an ASRock motherboard driver with known vulnerabilities," explained CISA in its security advisory.
The attack takes advantage of a known exploit in an ASRock motherboard driver. If a threat actor utilizes this exploit, they can execute malicious code in the Windows kernel. Successfully doing so is the key to moving laterally within a network.
"The APT actors can use a tool that installs and exploits a known-vulnerable ASRock-signed motherboard driver, AsrDrv103.sys, exploiting CVE-2020-15368 to execute malicious code in the Windows kernel," explained CISA. "Successful deployment of this tool can allow APT actors to move laterally within an IT or OT environment and disrupt critical devices or functions."

World of Warcraft: Dragonflight has a real chance to make WoW grow again
WoW has been in decline over the past few years, from its peak of 15 million monthly active users. With the upcoming expansion, Dragonflight, Blizzard has a real chance at recapturing that old magic. And there are signs they know how to do it.

How Microsoft and Volkswagen got HoloLens 2 to work within vehicles
Microsoft's HoloLens 2 is now able to work while on moving vehicles, such as large ships. The feature was made possible through a partnership between the tech giant and Volkswagen.

5 things I want to see from the Xbox and Bethesda Games Showcase
The Xbox and Bethesda Games Showcase is just over a month away, and Microsoft will no doubt show us many upcoming experiences from Xbox Game Studios during the show. Here's a breakdown of five games that I want to see the most during the showcase.

Should your next computer be a mini PC? These are your best options.
Windows PCs come in all shapes and sizes, and whatever your needs, there's a computer out there to suit you. Here are the best to choose from if you're looking for a new mini PC.