Re:Malware Could Use SSD Over-Provisioning to Bypass Securit...
by Diggsey on Thursday December 30, 2021 @08:02PM
(#29743637)
The fact that to execute the malware you need to be able to see it. If there's something that's visible whose job is to execute the payload hidden in the SSD, then that's the part that could be detected by AV software.
That said, it might still be a useful technique just for storing data in a hard to detect way.
That said, it might still be a useful technique just for storing data in a hard to detect way.