shim

shim，第一阶段的 UEFI 引导加载程序 shim 是一个简单的 EFI 应用程序，运行时它会尝试打开并执行另一个应用程序。它最初会尝试通过标准的 EFI LoadImage 和 StartImage 调用来完成此操作。如果这些调用失败（例如，因为启用了安全启动且二进制文件未使用相应的密钥签名），它将根据内置证书验证该二进制文件。如果验证成功并且该二进制文件或签名密钥未被禁止，shim 将重定位并执行该二进制文件。 协议 shim 锁定协议 shim 还会安装一个协议，允许第二阶段的引导加载程序执行类似的二进制验证。该协议具有 shim.h 头文件中描述的...

Embedded Malicious Code

Overview cdn-icon-fetcher-help is a Malicious package. Affected versions of this package are vulnerable to Embedded Malicious Code. Once this package is installed and executed, it downloads a Javascript file from a cdn-static-seven.vercel.app URL, which appears to be an image hosting site. Howeve...

Embedded Malicious Code

Overview cdn-icon-fetch is a Malicious package. Affected versions of this package are vulnerable to Embedded Malicious Code. Once this package is installed and executed, it downloads a Javascript file from a cdn-static-server.vercel.app URL, which appears to be an image hosting site. However, by...

ViperSoftX InfoStealer Adopts Sophisticated Techniques to Avoid Detection

A significant number of victims in the consumer and enterprise sectors located across Australia, Japan, the U.S., and India have been affected by an evasive information-stealing malware called ViperSoftX. ViperSoftX was first documented by Fortinet in 2020, with cybersecurity company Avast...