Document not found! Please try again

HACKING EXPOSED EMBEDDED – THE DARK ... - RSA Conference

4 downloads 151 Views 704KB Size Report
Android Zero Shell. ▫ Install App. ▫ Introduce Command and Control. ▫ Demo the Zero Shell. ▫ Show App Exploitation to get additional Privs. 9 ...
HACKING EXPOSED EMBEDDED – THE DARK WORLD OF TINY SYSTEMS AND BIG HACKS Stuart McClure McAfee An Intel Company

Session ID: EXP-302 Session Classification: Intermediate

Embedded ƒ Chips are Everywhere ƒ Full OS

ƒ Mobile Payments ƒ Smart Phones

2

The Hacks ƒ NFC ƒ Android zero shell ƒ iJacking ƒ Rogue mouse

3

Near Field Communications (NFC)

4

NFC hijacking ƒ NFC is a technology built into modern phones ƒ Active (Phone)/Passive(tag) ƒ Similar to RFID

ƒ Active (Phone)/Active(POS) ƒ Visa and Mastercard touch payment systems

ƒ A/P used in Europe for donations and other simple payments ƒ Real world attack that is happening today

5

NFC ƒ Explain Donation Poster ƒ Use Poster to donate ƒ Hijack Poster ƒ Steal Donation/Credit Card

6

Android Zero Shell

7

Android Zero Shell Which App is more Safe?

8

Android Zero Shell ƒ Install App ƒ Introduce Command and Control ƒ Demo the Zero Shell ƒ Show App Exploitation to get additional Privs

9

iJacking

10

iJacking

iPwn your iDevice 11

iJacking ƒ Show iPad connecting to Wifi ƒ Use ipad to log into gmail ƒ Show exploit on iPad ƒ Send APT/VNC ƒ Introduce C&C ƒ Show Map ƒ Dump Keychain ƒ Show Reverse Shell

12

Rogue Mouse

13

ROGUEMOUSE • Embed a USB hub and Ethernet Adapter into mouse. • Embed a miniature ARM computer with running Linux with DHCP and HTTPD. • Connect the ARM computer to the Ethernet Adapter with a crossover cable. • Control a virtualized LAN targeting ANY valid IPv4 Network ID via the ARM computer.

MALWAREINJECTION • User navigates to website hosted somewhere on the spoofed network. • Trojan mouse hosts malicious webserver and serves up infected software updates containing malware code. • Host computer now infected. Malware signals mouse to disable internal interface.

Countermeasures ƒ NFC ƒ Active/Active is safer (for now)

ƒ Android zero shell ƒ Be careful of apps, get only from legitimate sources

ƒ iJacking ƒ Keep up to date on patches, be careful where you connect

ƒ Rogue mouse ƒ Block new USB devices, or just don’t plug them in

16

Apply Slide ƒ NFC ƒ Android zero shell ƒ iJacking ƒ Rogue mouse

17

Thank you!

18