[tor-talk] Coderman's taobios-v2.tar.bz2

[Where is Coderman? <DondeEsCoderman@xxxxxxxxxxxxxx>]

Saludad Tor-Talk!

A while back Coderman posted:
“[tor-talk] How does one remove the NSA Virus off the BIOS Chip as described by Snowden in the ANT Program

here's some fun for you:
https://peertech.org/files/taobios-v2.tar.bz2

$ sha256sum taobios-v2.tar.bz2
0ba12b0ecf89d109301b619cbc8275e5cd78b6fefd3724fba0b6952186e37779

interesting details in both samples!
( L2 is config only PDoS via UEFI BIOS :)
”
https://lists.torproject.org/pipermail/tor-talk/2015-December/039678.html

This appears to reference BIOS recovery exploit to launch malware in SMM. I am trying to find a copy of this malware directly, not just the virustotal reports. The peertech.org domain appears to be taken over.

Checking for old versions in archive.org does not yeild result - https://web.archive.org/web/20160630/peertech.org/files/taobios-v2.tar.bz2.

After seeing CCC Camp presentation on Sednit UEFI malware - https://media.ccc.de/v/35c3-9561-first_sednit_uefi_rootkit_unveiled - I am reminded of this.

Does anyone has it?
-- 
tor-talk mailing list - tor-talk@xxxxxxxxxxxxxxxxxxxx
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk