Operation ShadowHammer – Compromised ASUS Computers
Image Description
Common Information
Type Value
UUID f5cec518-f0ea-4e96-becf-3ddf37fc8f3e
Fingerprint ae686a1d57625e952d396018245f7f315dae5214d5034e3f6a9b5e6566b8b2ef
Analysis status DONE
Considered CTI value 0
Text language
Published Dec. 11, 2019, 11:55 a.m.
Added to db March 10, 2024, 11:31 a.m.
Last updated Aug. 31, 2024, 4:12 a.m.
Headline Operation ShadowHammer – Compromised ASUS Computers
Title Operation ShadowHammer – Compromised ASUS Computers
Detected Hints/Tags/Attributes 22/1/15
Attributes
Details Type #Events CTI Value
Details Domain 19
motherboard.vice.com
Details Domain 403
securelist.com
Details Domain 29
www.cnet.com
Details Domain 2
shadowhammer.kaspersky.com
Details Domain 2
sas.kaspersky.com
Details Domain 9
www.asus.com
Details Domain 1
dlcdnets.asus.com
Details IPv4 24
1.0.1.0
Details Url 1
https://motherboard.vice.com/en_us/article/pan9wn/hackers-hijacked-asus-software-updates-to-
Details Url 6
https://securelist.com/operation-shadowhammer/89992
Details Url 1
https://www.cnet.com/news/hackers-took-over-asus-updates-to-send-malware-researchers-found
Details Url 2
https://shadowhammer.kaspersky.com
Details Url 1
https://sas.kaspersky.com
Details Url 1
https://www.asus.com/news/hqfgvuyz6uyayje1
Details Url 1
https://dlcdnets.asus.com/pub/asus/nb/apps_for_win10/asusdiagnostictool/asdt_v1.0.1.0