When Lightning Strikes Thrice: Breaking Thunderbolt 3 Security🔒 SSL Verified

Table of Contents

• ↓ By Björn Ruytenberg
• ↓ Thunderspy PoCs in Action
• ↓ Full Summary
• ↓ Thunderbolt: A Closer Look
• ↓ Who discovered Thunderspy?
• ↓ Disclosure Timeline
• ↓ Top Alternatives to thunderspy.io

6-Month Traffic Trend Estimate

Official Contact & Profiles

Visual representation extracted from thunderspy.io

Content Snippets from thunderspy.io

"Thunderspy targets devices with a Thunderbolt port. If your computer has such a port, an attacker who gets brief physical access to it can read and copy all your data, even if your drive is encrypted and your computer is locked or set to sleep."

"Thunderspy is stealth, meaning that you cannot find any traces of the attack. It does not require your involvement, i.e., there is no phishing link or malicious piece of hardware that the attacker tricks you into using. Thunderspy works even if you follow best security practices by locking or suspending your computer when leaving briefly, and if your system administrator has set up the device with Secure Boot, strong BIOS and operating system account passwords, and enabled full disk encryption. All the attacker needs is 5 minutes alone with the computer, a screwdriver, and some easily portable hardware."

"We have found 7 vulnerabilities in Intel’s design and developed 9 realistic scenarios how these could be exploited by a malicious entity to get access to your system, past the defenses that Intel had set up for your protection."

"We have developed a free and open-source tool, Spycheck, to determine if your system is vulnerable. If it is found to be vulnerable, Spycheck will guide you to recommendations on how to help protect your system."

Key Topics & Focus Areas for thunderspy.io:

By Björn Ruytenberg

Thunderspy PoCs in Action

Full Summary

Thunderbolt: A Closer Look

Who discovered Thunderspy?

Disclosure Timeline