Geekom Admits to Shipping Malware-Laced Network Drivers for AMD Mini PCs

Geekom's network drivers for its A7, A8, AE7, AE8, AX7 Pro, and AX8 Pro mini PCs contained malware that could grant administrator-level permissions on a user's machine. This allowed the malware to steal data, intercept keystrokes, and retrieve passwords.

The malware was discovered by Videocardz, who found that the Asruex backdoor malware was present in the driver installer. Geekom has since removed the software package and apologized for the issue.

The problem arose because the malicious driver was still accessible on a "legacy page" that had been replaced and was no longer accessible through Geekom's support navigation. However, the page was still indexed by search engines, making it likely that users would stumble upon it.

Geekom has requested that Videocardz retract its original reporting of the problem, but the request was denied.

The discovery of the malware highlights the importance of only downloading software from trusted sources. Users are advised to get driver packages from Windows Update and only visit manufacturers' websites if necessary.

The incident is seen as a case of Hanlon's Razor, where a relatively small OEM like Geekom would have little to gain and much to lose by intentionally shipping malware packages with their machines.

### Malware Details

| Driver Model | Affected Models | Malware Type | | --- | --- | --- | | LAN Driver | A7, A8, AE7, AE8, AX7 Pro, AX8 Pro | Asruex backdoor malware |

### Affected Users

If you have a Geekom mini PC from the affected lines and have installed the LAN driver from the company's website in the past, it is recommended to perform a full system wipe or a Windows Defender offline scan.

### Geekom's Response

Geekom has removed the malicious software package and offered an apology for the issue. The company has also provided guidance to affected users, advising them to take steps to protect their machines.

### Conclusion

The discovery of the malware-laced network drivers for Geekom's mini PCs serves as a reminder of the importance of only downloading software from trusted sources. Users are advised to be cautious when downloading software and to only visit manufacturers' websites if necessary.