Threat actor uses HP iLO rootkit to wipe servers

[[correlate]]

Content source

https://therecord.media/threat-actor-uses-hp-ilo-rootkit-to-wipe-servers/

An Iranian cyber-security firm said it discovered a first-of-its-kind rootkit that hides inside the firmware of HP iLO devices and which has been used in real-world attacks to wipe servers of Iranian organizations.

Named iLOBleed, the rootkit was discovered by Tehran-based security firm Amnpardaz and detailed in a report released on Tuesday.

According to the company, iLOBleed targets HP iLO (Integrated Lights-Out), a hardware device that can be added to servers or workstations as an add-on board.

Threat actor uses HP iLO rootkit to wipe servers

An Iranian cyber-security firm said it discovered a first-of-its-kind rootkit that hides inside the firmware of HP iLO devices and which has been used in real-world attacks to wipe servers of Iranian organizations.

therecord.media

 

[LASER_oneXM]

New iLOBleed Rootkit Targeting HP Enterprise Servers with Data Wiping Attacks

Researchers warn of a new iLOBleed rootkit malware that targets HP enterprise servers to delete data from the servers.

thehackernews.com