Russian hackers at it again

[Turbineguy]

This article showed up on my google homepage this morning.

First UEFI malware discovered in wild is laptop security software hijacked by Russians

“LoJax” repurposed LoJack anti-theft agent as rootkit that could survive OS re-installs.

https://arstechnica.com/information-technology/2018/10/first-uefi-malware-discovered-in-wild-is-laptop-security-software-hijacked-by-russians/

[woodsprite]

1. Several of the FB groups I belong to have gone private, by admin invite only.

Mainly because they've been inundated with new members attempting to join, who appear to have no history or online presence and can't be verified.

[Turbineguy]

2. I'm far from being an expert on this field

but I run ESET scans periodically. They catch a few things that my regular AV misses. It seems that running other vendors' AV from time to time is a good idea.

Clickbait posts on FB could be a point of entry as members of a group might consider themselves in a circle of trust.

[Initech]

3. *NEVER* run any software that can't be verified.

Doesn't matter if it's an app or any kind of desktop application, if it can't be verified, don't download. Mainly because we live in an era where there's tons of fake and scam products being sold (like LoJack), they can be easily be hacked into.

[woodsprite]

4. This was "users" requesting access to the group and the users couldn't be verified.

I assist with a FB page for the group we sing with so we've been monitoring posts, but the board of directors wanted to keep the FB page open to the public.

[Initech]

5. I was talking about the LoJack software.

There's two worst case scenarios that I can think of and both of those involve either wiping your drive completely with a full format or replacing the drive. But either way that can't be good.