LightEater Demo: Stealing GPG keys/emails in Tails via remote firmware infection

In this video we infect a MSI B85M P33 “Military Grade“ motherboard’s BIOS via remote access. We insert a “LightEater“ backdoor, that is capable of subverting the Tails live OS, and stealing GPG keys, GPG key passphrases, and decrypted GPG emails The LightEater malware runs in System Management Mode (SMM) which is the most privileged execution domain on x86 systems. It is able to subvert all software that runs at a lower privilege level (e.g. hypervisors/virtual machine monitors, OS kernels, and application
Back to Top