MSI Incident Part 2: Binary Analysis

In the first part of this series, we described the incident between MSI and a new ransomware group known as Money Message. The group claimed to be able to release malicious firmware with what they had stolen, which included MSI’s development framework and private keys. Since this is a serious situation, we assessed various risks related to the event. We found notable increases in risks related to supply chain, backdoors, and vulnerabilities, but we also re-confirmed the extreme risk already …

analysis backdoors binary binary analysis development event firmware framework incident keys malicious message money money message msi private private keys ransomware ransomware group release risk risks series serious signatures stolen supply supply chain systems updates vulnerabilities