'We didn’t get any information about this laptop, no test credentials, no configuration details, no nothing, it was a 100% blackbox test,' Dolos says. Exploiting the flaw provided access to the BitLocker decryption key, which started the domino effect that led to the network's compromise.ĭolos made its discovery after a client gave it a pre-configured Lenovo PC and asked Dolos to crack its internal network. 'Getting around the TPM in this manner is akin to ignoring Fort Knox and focusing on the not-so-armored car coming out of it,' Dolos Group says. The problem isn't with the hardware itself, Dolos Group says, but instead lies with its reliance on the unencrypted Serial Peripheral Interface (SPI) protocol it uses to communicate with the laptop's CPU. TPMs are specifically designed to keep sensitive information secure. Researchers at Dolos Group, an offensive security firm that simulates genuine cyberattacks on its clients, discovered (Opens in a new window) that someone could gain access to an ostensibly secure internal network by exploiting vulnerabilities in a stolen Windows laptop with BitLocker Drive Encryption (Opens in a new window) enabled.ĭolos Group says that 'a pre-equipped attacker can perform this entire attack chain in less than 30 minutes with no soldering, simple and relatively cheap hardware, and publicly available tools' by targeting data sent between the laptop's CPU and its Trusted Platform Module (TPM).

How to Set Up Two-Factor Authentication.

How to Record the Screen on Your Windows PC or Mac.

How to Convert YouTube Videos to MP3 Files.

How to Save Money on Your Cell Phone Bill.

How to Free Up Space on Your iPhone or iPad.

How to Block Robotexts and Spam Messages.

Crack bitlocker