News

New Spectre Variant Can Remotely Target Systems

NetSpectre Allows Attacks Without Local Code

Late last year, Spectre and Meltdown came out as new side-channel attacks. Fortunately, the victim system had to run the malicious code, limiting the impact. This limited the attack surface exposed to malicious actors. A lot more research has gone into this area since the groundbreaking attacks. Following up, we now have a new version of Spectre that works without having to run any code at all. Researchers have dubbed the new Spectre, NetSpectre.

Spectre side-channel attacks work by exploiting the architectural behaviors of processors. By using malicious code to trigger CPU actions and timing them, data in the cache can be discerned. This attack requires that the victim run the specific code that triggers the CPU. With NetSpectre, the attacker just needs network access. Instead of measuring CPU response time, the new attack targets network response time. There are two new methods that attack either the cache or AVX2 units.

New Attack Makes Unpatched Systems More Vulnerable to Spectre

For the cache-attack, the attacker starts off a large download. Once the cache is filled up, the attacker determines based on response time if a certain bit was present or not. For the AVX2 attack, it is a lot more novel. Intel CPUs have AVX2 units that are either idle or not. There is a measurable performance difference between them. The attacker can discern information from the system, by calling AVX2 instructions and measuring the response time, based on their power state.

Luckily, these network attacks are quite slow. On a local network, the cache takes 30 minutes per byte and the AVX2, 8 minutes. For a remote system, it jumps up to 8 hours and 3 hours respectively. This means attacks have to very targeted at things like encryption keys since it takes so long to get usable data. Furthermore, Intel and Microsoft system patches should protect against this attack. This means most users shouldn’t have to worry. However, with growing side-channel awareness, more exploits are sure to come to light.

Samuel Wan

Samuel joined eTeknix in 2015 after becoming engrossed in technology and PC hardware. With his passion for gaming and hardware, tech writing was the logical step to share the latest news with the world. When he’s not busy dreaming about the latest hardware, he enjoys gaming, music, camping and reading.

Disqus Comments Loading...

Recent Posts

Trust Gaming GXT 609 Zoxa 2.0 PC Speakers

SOUNDS GREAT – Full stereo sound (12W peak power) gives your setup a booming audio…

3 hours ago

PowerA Wired Controller for Nintendo Switch

Special Edition Yoshi design Ergonomic controller shape with Nintendo Switch button layout Detachable 10ft (3m)…

3 hours ago

Logitech G Saitek PRO Flight Rudder Pedals

Fluid Motion: These flight rudder pedals are smooth and accurate that enable precise control over…

3 hours ago

Logitech G Saitek Farm Sim Controller

Heavy Equipment Bundle: Includes a steering wheel for heavy machinery, gas and brake pedals, and…

3 hours ago

Razer Ornata V3 X – Low Profile Gaming Keyboard

Low-profile Keys for an ergonomic gaming experience. With slimmer keycaps and shorter switches, enjoy natural…

3 hours ago

Glorious Gaming Model O Wired Gaming Mouse

Size & style: Ambidextrous lightweight mouse for gaming. Built for speed, control and comfort, with…

3 hours ago