Menu
Super Micro to review hardware for malicious chips

Super Micro to review hardware for malicious chips

Server and storage manufacturer steps in to advise customers

Credit: Dreamstime

Computer hardware maker Super Micro Computer has said it would review its motherboards for any proof of malicious chips as alleged in a recent media report.

"Despite the lack of any proof that a malicious hardware chip exists, we are undertaking a complicated and time-consuming review to further address the article," the server and storage manufacturer said in a letter to its customers, dated 18 October.

A Bloomberg report on 4 October cited 17 unidentified sources from intelligence agencies and businesses that claimed Chinese spies had placed computer chips inside equipment used by about 30 companies, including Apple and Amazon.com and multiple U.S. government agencies, which would give Beijing secret access to internal networks.

Super Micro denied the allegations made in the report.

The company said the design complexity makes it practically impossible to insert a functional, unauthorised component onto a motherboard without it being caught by the checks in its manufacturing and assembly process.

It is entirely plausible that a malicious chip can be placed on a motherboard but it will be at a very high cost, and the risk of detection increases with every such chip in the field, said Jake Williams, a former National Security Agency analyst and founder of the cyber security firm Rendition Infosec.

"This technique would only be used for high value targets that couldn't be easily compromised via another attack vector," Williams said.

The Bloomberg report also said Apple in 2015 had found malicious chips on Super Micro motherboards and added that Amazon uncovered such chips the same year while examining servers made by Elemental Technologies, which Amazon eventually acquired.

Both Apple and Amazon have denied the allegations. Apple CEO Tim Cook told online news website BuzzFeed that Bloomberg should retract the story.

Amazon Web Services CEO Andy Jassy also joined Cook in asking Bloomberg to retract the report.

"Bloomberg story is wrong about Amazon, too ... Reporters got played or took liberties. Bloomberg should retract," Jassy said in a tweet on Monday.

Bloomberg had previously said it stood by its report and was confident of its reporting, which was conducted for more than a year.

Security experts as well as the U.S. and U.K. authorities have said they had no knowledge of the attacks.

(Reporting by Sonam Rai in Bengaluru; Editing by Arun Koyyur and Anil D'Silva)


Follow Us

Join the newsletter!

Or

Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.

Tags AppleamazonSuper Micro

Featured

Slideshows

Reseller News launches alumnae breakfast for Women in ICT Awards

Reseller News launches alumnae breakfast for Women in ICT Awards

Reseller News hosted the first alumnae breakfast for the Women in ICT Awards in New Zealand, designed to showcase the leading female leaders in the industry. Held at The Cordis in Auckland, attendees came together to hear inspiring keynotes and panel discussions, alongside high-level networking among peers.

Reseller News launches alumnae breakfast for Women in ICT Awards
Reseller News Innovation Awards 2018: meet the top performing partners

Reseller News Innovation Awards 2018: meet the top performing partners

Reseller News honoured the industry’s finest on a standout evening for the New Zealand channel, recognising the achievements of established partners, emerging players and innovative start-ups, in front of over 460 technology leaders in Auckland.

Reseller News Innovation Awards 2018: meet the top performing partners
Show Comments