Supermicro spy chips, the sequel: It really, really happened, and with bad BIOS and more, insists Bloomberg

Following up on a disputed 2018 claim in its BusinessWeek publication that tiny spy chips were found on Supermicro server motherboards in 2015, Bloomberg on Friday doubled down by asserting that Supermicro’s products were targeted by Chinese operatives for over a decade, that US intelligence officials have been aware of this, and that authorities kept this information quiet while crafting defenses in order to study the attack.

“China’s exploitation of products made by Supermicro, as the US company is known, has been under federal scrutiny for much of the past decade, according to 14 former law enforcement and intelligence officials familiar with the matter,” states Bloomberg in its report, said to rely on interviews with more than 50 sources, mostly unnamed, in government and the private sector.

The article – a follow-on to BusinessWeek’s 2018 spy chip bombshell – cites three specific incidents: the 2010 discovery by the Defense Department that thousands of its computers were sending military network data to China due to code hidden in chips that handle the server startup process; rival chipmaker Intel’s discovery in 2014 that a Chinese hacking group penetrated its network via a server that fetched malware from an unidentified supplier’s update site; and a 2015 warning issued by the FBI to multiple companies that Chinese agents had hidden an extra chip with backdoored code on one manufacturer’s servers.

In other words, Bloomberg has expanded its claim that chips containing malicious spyware were added to Supermicro server motherboards, to also include word of malicious alterations to BIOS-level software to load and run surveillance code hidden in firmware, and to attacks on other vendors.

Beijing blues

According to Bloomberg, the common threads in these incidents are China, Supermicro, and unspecified discoveries by “US spymasters,” that were not widely disclosed.

The report goes on to claim that an FBI counterintelligence operation began in 2012, in which warrants under the Foreign Intelligence Surveillance Act were obtained to surveil a set of Supermicro employees. But the story further says that while it’s unclear whether this investigation remains ongoing, the Feds began working with people in the private sector to analyze these purported spy chips that had been secreted onto circuit boards.

The scenario is not entirely implausible to some in the security industry. “In the hierarchy of cyber attack techniques preferred by intelligence agencies, the highest levels attacks are those that are persistent even when machines are turned off and software is reloaded,” said Alan Paller, director of research at the SANS Institute and president of the SANS Technology Institute, in an email to The Register. “A malicious chip is the simplest solution. Simple solutions work.”

After all, even the NSA ran its own chop shops, adding backdoors to IT gear as it was shipped across the world.

Supermicro, as you might expect, has dismissed today’s story in a lengthy statement. It said in part:

To date, no one has presented any public evidence these spy chips exist: no one’s pointed at board and told the world, there, that’s the spy chip. And many respected security mavens, including Google’s Travis Ormandy have expressed deep skepticism of Bloomberg’s claims. Then there are the denials issued two years ago that Supermicro cites in its statement, from then-Director of National Intelligence Dan Coats, and FBI Director Christopher Wray. Apple and Amazon played down any suggestion that Supermicro systems infected with surveillance chips made it into production.

Yet the Bloomberg report today does provide a named source, Mukul Kumar, who as chief security officer for FPGA designer Altera claims to have learned of such a spy chip during an unclassified briefing. “This was espionage on the board itself,” he is quoted as saying. “There was a chip on the board that was not supposed to be there that was calling home — not to Supermicro but to China.”

The Register spoke with a former executive at a major semiconductor company who asked not to be named, about the plausibility that the subverted silicon cited in the Bloomberg report might exist and we were surprised to find that he found it credible.

“I have physically held evidence in my hands,” he said with regard to the existence of compromised hardware. “I have seen it from multiple governments.”

China, Israel, and the UK have excelled at these operations, he said, with France, Germany, and Russia also involved but, in his view, somewhat less capable in terms of hardware subversion.

Such attacks absolutely do happen, our source said, adding that there are government contracts seeking to study subverted hardware attacks so they can be replicated and improved upon. However, they’re generally not directed at the public, he said. Rather they’re focused on obtaining access to critical systems, on developing durable national security assets.

If a Chinese chip has indeed been identified, he said, then those involved in the operation messed up by not spending the resources to hide it better.

Software attacks are easier, he said, but they’re also easier to inspect. The complexity of hardware makes implants harder to find. In modern cell phone chips, for example, he said, you can implant silicon in the circuit board and then add chips on top of that to make the alteration less obvious.

“If you create something that should not be there, the x-ray inspector can discover it,” he said. “But if it’s changing the shape and size of existing silicon slightly, that’s harder to inspect. It’s not difficult to add a little circuitry and have no material difference in observability.”

“It’s important to have an awareness of the kinds of things that happen in order to motivate industry to make changes and ultimately keep people safe,” our source said.

The Register asked Supermicro whether it is considering litigation against Bloomberg. A spokesperson for the company was non-committal, saying only that the manufacturer is reviewing the story and considering its options. ®

READ MORE HERE