If you have a PC with an MSI motherboard please be aware of this SERIOUS security risk. (1 Viewer)

[Gromett]

Leak of MSI UEFI signing keys stokes fears of “doomsday” supply chain attack

With no easy way to revoke compromised keys, MSI, and its customers, are in a real pickle.

arstechnica.com

 

[Odd job]

As a non-tech person how would I know which motherboard I have?

 

[Gromett]

As a non-tech person how would I know which motherboard I have?

When you are booting there will be a BIOS screen. That should have the manufactures details on it. May have to hit del key a few times to get into the BIOS if it goes past too quick.

OR. In windows there must be some software that will show you?

I am sorry I can't be more help. On linux it is easy.
sudo dmidecode -t 2

 

[Gromett]

As a non-tech person how would I know which motherboard I have?

As I don't know windows I asked ChatGPT. Not sure if it is helpful or not? Let me know if this worked please?
If it doesn't let me know what version of windows you have?

 

[chesterfield hooligan]

Does the same go for laptops Mr Gromett

^{_{Subscribers  do not see these advertisements}}

 

[GJH]

As I don't know windows I asked ChatGPT. Not sure if it is helpful or not? Let me know if this worked please?
If it doesn't let me know what version of windows you have?

View attachment 751618

On this PC (Windows 11 Home) the motherboard is referred to as BaseBoard and details are under System Summary in the RH panel (subsidiary level Components does not have to be expanded).

EDIT: The same applies to Windows 10 Pro on one of my laptops.

 

[Gromett]

Does the same go for laptops Mr Gromett

If it is made by MSI then there is risk yes.

The problem is that with the private key being out there, hackers/scammers can sign a bit of software and make it look like an official MSI update.
This includes BIOS updates. If they manage to get a BIOS update onto your system you are hoopa jooped. You can reformat your hard disk as much as you want and you won't get rid of the malware.
Even putting a new hard drive in will not clear it. The malware will be on your motherboard/mainboard/baseboard and is likely there permanently.

 

[Odd job]

Thanks I've checked mine and it's made by Packard Bell, at least I hope they made it and didn't buy just it from MSI and put their name on it