200¥â¥Ç¥ë°Ê¾å¤ÎGIGABYTEÀ½¥Þ¥¶¡¼¥Ü¡¼¥É¤Ë¡ÖPCµ¯Æ°»þ¤ËWindows¤Ø¥Þ¥ë¥¦¥§¥¢¤ò¥¤¥ó¥¹¥È¡¼¥ë²Äǽ¤Ê·ç´Ù¡×¤¬Â¸ºß
GIGABYTEÀ½¥Þ¥¶¡¼¥Ü¡¼¥É¤Ë¡ÖWindows¤ØǤ°Õ¤Î¼Â¹Ô¥Õ¥¡¥¤¥ë¤ò¥¤¥ó¥¹¥È¡¼¥ë²Äǽ¤Ë¤¹¤ë·ç´Ù¡×¤¬Â¸ºß¤¹¤ë¤³¤È¤¬È½ÌÀ¤·¤Þ¤·¤¿¡£·ç´Ù¤Ï200°Ê¾å¤Î¥â¥Ç¥ë¤Ç³Îǧ¤µ¤ì¤Æ¤ª¤ê¡¢¿×®¤Ê¥Õ¥¡¡¼¥à¥¦¥§¥¢¥¢¥Ã¥×¥Ç¡¼¥È¤¬¿ä¾©¤µ¤ì¤Æ¤¤¤Þ¤¹¡£
Supply Chain Risk from Gigabyte App Center Backdoor - Eclypsium | Supply Chain Security for the Modern Enterprise
GIGABYTEÀ½¥Þ¥¶¡¼¥Ü¡¼¥É¤Î·ç´Ù¤òȯ¸«¤·¤¿¤Î¤Ï¡¢¥»¥¥å¥ê¥Æ¥£´ë¶È¡ÖEclypsium¡×¤Ç¤¹¡£Eclypsium¤Ë¤è¤ë¤È¡¢¼«Æ°¸¡ÃÎ¥·¥¹¥Æ¥à¤Ë¤è¤Ã¤ÆGIGABYTEÀ½¥Þ¥¶¡¼¥Ü¡¼¥ÉÅëºÜPC¾å¤Ç¡ÖWindows¤Îµ¯Æ°¥×¥í¥»¥¹Ãæ¤Ë¼Â¹Ô²Äǽ¥Õ¥¡¥¤¥ë¤ò½ñ¤¹þ¤àÆ°¤¡×¤¬¸¡½Ð¤µ¤ì¤¿¤È¤Î¤³¤È¡£Eclypsium¤¬¼Â»Ü¤·¤¿¾ÜºÙʬÀϤˤè¤Ã¤Æ200¤òĶ¤¨¤ë¥â¥Ç¥ë¤Ç¼Â¹Ô²Äǽ¥Õ¥¡¥¤¥ë¤Î½ñ¤¹þ¤ß¤¬²Äǽ¤Ç¤¢¤ë¤³¤È¤¬ÌÀ¤é¤«¤Ë¤Ê¤ê¤Þ¤·¤¿¡£
·ç´Ù¤¬Â¸ºß¤¹¤ë¥Þ¥¶¡¼¥Ü¡¼¥É¤ÎUEFI¥Õ¥¡¡¼¥à¥¦¥§¥¢¤Ë¤Ï¡ÖAEB1671D-019C-4B3B-BA-00-35-A2-E6-28-04-36¡×¤È¤¤¤¦GUID¤Î¥Ü¥ê¥å¡¼¥à¤¬Â¸ºß¤·¤Æ¤ª¤ê¡¢¥Ü¥ê¥å¡¼¥àÆâ¤Ë¤Ï¡Ö8ccbee6f7858ac6b92ce23594c9e2563ebcef59414b5ac13ebebde0c715971b2.bin¡×¤È¤¤¤¦Ì¾Á°¤Î¼Â¹Ô¥Õ¥¡¥¤¥ë¤¬Êݸ¤µ¤ì¤Æ¤¤¤Þ¤·¤¿¡£UEFIÆâ¤Ë¸ºß¤¹¤ë¼Â¹Ô¥Õ¥¡¥¤¥ë¤ÏWindows¤Îµ¯Æ°¥×¥í¥»¥¹Ãæ¤Ë¡Ö%SystemRoot%\system32\GigabyteUpdateService.exe¡×¤Ë¼«Æ°Åª¤Ë½ñ¤¹þ¤Þ¤ì¡¢Windows¥µ¡¼¥Ó¥¹¤È¤·¤Æ¼Â¹Ô¤µ¤ì¤ë¾õÂÖ¤À¤Ã¤¿¤È¤Î¤³¤È¡£
¾åµ¤ÎÆ°ºî¼«ÂΤÏGIGABYTE¤Î¥¢¥Ã¥×¥Ç¡¼¥È¥·¥¹¥Æ¥à¤ÎÀµ¾ï¤ÊÆ°ºî¤Î¤è¤¦¤Ë¤â¸«¤¨¤Þ¤¹¤¬¡¢¤³¤Î¥¢¥Ã¥×¥Ç¡¼¥È¥·¥¹¥Æ¥à¤Ï¡Öhttp://mb.download.gigabyte.com/FileList/Swhttp/LiveUpdate4¡×¡Öhttps://mb.download.gigabyte.com/FileList/Swhttp/LiveUpdate4¡×¡Öhttps://software-nas/Swhttp/LiveUpdate4¡×¤Î¤¤¤º¤ì¤«¤Ë¥¢¥¯¥»¥¹¤·¤Æ¼Â¹Ô²Äǽ¥Õ¥¡¥¤¥ë¤ò¥À¥¦¥ó¥í¡¼¥É¡õ¼Â¹Ô¤¹¤ë¤è¤¦¤ËÀ߷פµ¤ì¤Æ¤¤¤¿¤È¤Î¤³¤È¡£¤³¤Î¤¦¤Á¡Öhttp://mb.download.gigabyte.com/FileList/Swhttp/LiveUpdate4¡×¤Ï´Êñ¤Ë²þ¤¶¤ó¤¬²Äǽ¤Ê¾õÂ֤Ǥ¢¤ë¤³¤È¤Ë²Ã¤¨¡¢¥¢¥Ã¥×¥Ç¡¼¥È¥·¥¹¥Æ¥à¤Ë¸¡¾Úµ¡Ç½¤¬¼ÂÁõ¤µ¤ì¤Æ¤¤¤Ê¤¤¤¿¤á¹¶·â¼Ô¤¬°°Õ¤¢¤ë¥Õ¥¡¥¤¥ë¤òÍưפ˼¹ԤǤ¤ë¾õÂÖ¤¬À¸¤¸¤Æ¤¤¤Þ¤·¤¿¡£
Eclypsium¤¬¸ø³«¤·¤Æ¤¤¤ë(PDF¥Õ¥¡¥¤¥ë)±Æ¶Á¤ò¼õ¤±¤ë¥Þ¥¶¡¼¥Ü¡¼¥É¥ê¥¹¥È¤Ë¤Ï¡ÖIntel Z790¡×¡ÖIntel B760¡×¡ÖIntel Z690¡×¡ÖIntel B660¡×¡ÖIntel H610¡×¡ÖAMD X670¡×¡ÖAMD B650¡×¡ÖAMD X570¡×¡ÖAMD B550¡×¤È¤¤¤Ã¤¿¥Á¥Ã¥×¥»¥Ã¥È¤òºÎÍѤ·¤¿¥Þ¥¶¡¼¥Ü¡¼¥É200¥â¥Ç¥ë°Ê¾å¤¬µºÜ¤µ¤ì¤Æ¤¤¤Þ¤¹¡£
º£²óȯ¸«¤µ¤ì¤¿·ç´Ù¤ÏUEFI¥Õ¥¡¡¼¥à¥¦¥§¥¢Æâ¤Ë¸ºß¤¹¤ë¤¿¤á¡¢Windows¤ÎºÆ¥¤¥ó¥¹¥È¡¼¥ë¤ò¹Ô¤Ã¤Æ¤â¶¼°Ò¤òËɤ°¤³¤È¤Ï¤Ç¤¤Þ¤»¤ó¡£¤³¤Î¤¿¤á¡¢Eclypsium¤Ï±Æ¶Á¤ò¼õ¤±¤ë¥Þ¥¶¡¼¥Ü¡¼¥É¤Î½êͼԤËÂФ·¤Æ°Ê²¼¤ÎÂкö¤ò¸Æ¤Ó¤«¤±¤Æ¤¤¤Þ¤¹¡£
¡¦¥Õ¥¡¡¼¥à¥¦¥§¥¢¤òºÇ¿·¤Ë¥¢¥Ã¥×¥Ç¡¼¥È¤¹¤ë
¡¦UEFIÆâ¤Î¡ÖAPP Center Download ¡õ Install¡×¤ò̵¸ú²½¤¹¤ë
¡¦BIOS¤Ë¥Ñ¥¹¥ï¡¼¥É¤òÀßÄꤹ¤ë
¡¦¡Öhttp://mb.download.gigabyte.com/FileList/Swhttp/LiveUpdate4¡×¡Öhttps://mb.download.gigabyte.com/FileList/Swhttp/LiveUpdate4¡×¡Öhttps://software-nas/Swhttp/LiveUpdate4¡×¤ò¥Ö¥í¥Ã¥¯¤¹¤ë
¤Ê¤ª¡¢ÌäÂê¤Î¼Â¹Ô¥Õ¥¡¥¤¥ë¤¬Êݸ¤µ¤ì¤Æ¤¤¤¿¥Ü¥ê¥å¡¼¥à¡ÖAEB1671D-019C-4B3B-BA-00-35-A2-E6-28-04-36¡×¤¬AsrockÀ½¤Î¥Þ¥¶¡¼¥Ü¡¼¥É¡ÖX670E Pro RS¡×Æâ¤Ë¤â´Þ¤Þ¤ì¤Æ¤¤¤¿¤È¤¤¤¦Êó¹ð¤â¤¢¤ê¤Þ¤¹¡£¤³¤Î¤¿¤á¡¢GIGABYTE°Ê³°¤Î¥á¡¼¥«¡¼¤Î¥Þ¥¶¡¼¥Ü¡¼¥É¤Ë¤âƱÍͤΥꥹ¥¯¤¬Â¸ºß¤¹¤ë²ÄǽÀ¤¬¤¢¤ê¤Þ¤¹¡£
This issue is not specific to Gigabyte, but likely invented by AMI and pushed for downstream OEMs as a "value-add" and "major feature".
Here is a file with the same GUID inside UEFI image for Asrock X670E Pro RS, and it does start a similar "Auto Driver Update" tool using WPBT. https://t.co/3qu5Fi2Fta pic.twitter.com/yrQM78VGoS— Nikolaj Schlej (@NikolajSchlej) May 31, 2023