Every modern computer system based on Intel architecture has Intel Management Engine (ME) - a built-in subsystem with a wide array of powerful capabilities (such as full access to operating memory, out-of-band access to a network interface, running independently of CPU even when it is in a shutdown state, etc.). During this talk we will discuss methods of remote pwning of almost every Intel based system, manufactured since 2010 or later.<br /><br />By Dmitriy Evdokimov & Alexander Ermolov & Maksim Malyutin<br /><br />Full Abstract & Presentation Materials: <a href="https://www.blackhat.com/us-17/briefings.html#intel-amt-stealth-breakthrough" target="_blank" rel="nofollow">https://www.blackhat.com/us-17/briefings.html#intel-amt-stealth-breakthrough</a><br /><br />from Black Hat <a href="https://www.youtube.com/watch?v=ubmKdOMRhLk" target="_blank" rel="nofollow">https://www.youtube.com/watch?v=ubmKdOMRhLk</a> @BlackHatOfficialYT <a href="https://www.youtube.com/@BlackHatOfficialYT" target="_blank" rel="nofollow">https://www.youtube.com/@BlackHatOfficialYT</a><br /><br /><br />INTEL AMT STEALTH BREAKTHROUGH<br /><br />Every modern computer system based on Intel architecture has Intel Management Engine (ME) - a built-in subsystem with a wide array of powerful capabilities (such as full access to operating memory, out-of-band access to a network interface, running independently of CPU even when it is in a shutdown state, etc.). On the one hand, these capabilities allow Intel to implement many features and technologies based on Intel ME. On the other hand, it makes Intel ME a tempting target for an attacker. Especially, if an attack can be conducted remotely.<br /><br />Here, Intel Active Management Technology (AMT) fits perfectly – it is based on Intel ME and means for a remote administration of computer system. So… during this talk we will discuss methods of remote pwning of almost every Intel based system, manufactured since 2010 or later.