Gigabyte Motherboards Sold with Critical Firmware Backdoor.

Hundreds of motherboard models made by Gigabyte include a backdoor functionality that could pose a significant risk to organizations, according to researchers at Eclypsium. The firmware on many Gigabyte systems drops a Windows binary that is executed when the operating system boots up, which then downloads and runs another payload fetched from Gigabyte servers over an insecure connection. While the feature appears related to the Gigabyte App Center, it could be abused by threat actors and is difficult to remove. Eclypsium has published a list of more than 270 affected motherboard models, indicating that millions of devices likely have the backdoor.