Methods and apparatus to mitigate firmware malware
Example methods and apparatus are disclosed herein to mitigate firmware malware, an example apparatus comprising at least one memory; instructions; and at least one processor to execute the instructions to cause the at least one processor to at least: detect presence of firmware malware, the firmware malware to be executed prior to booting of an operating system of a computing device; attempt remediation of the firmware malware; and in response to a failure to remediate the firmware malware, cause display of a notification of the presence of the firmware malware.
1. An apparatus to mitigate firmware malware, the apparatus comprising:
at least one memory;
instructions; and
at least one processor to execute the instructions to cause the at least one processor to at least:
detect presence of firmware malware, the firmware malware to be executed prior to booting of an operating system of a computing device;
attempt remediation of the firmware malware;
in response to a failure to remediate the firmware malware, cause display of a notification of the presence of the firmware malware;
after display of the notification and before booting the operating system, display a first prompt to request a sequence of characters;
generate an internal override code from a seed code; and
after a determination that an entered sequence of characters matches the internal override code and before booting the operating system, cause display of a second prompt that is to request a user credential.
2. The apparatus of claim 1 , wherein the at least one processor is to:
cause display of the second prompt to request the user credential; and
validate the user credential prior to enabling disk decryption.
3. The apparatus of claim 2 , wherein the at least one processor is to enable the disk decryption before the booting of the operating system of the computing device.
4. The apparatus of claim 1 , wherein the at least one processor is to, in response to the failure to remediate the firmware malware, determine if a boot override is allowed.
5. The apparatus of claim 1 , wherein the at least one processor is to, in response to successfully remediating the firmware malware, cause display of a prompt that is to request a user credential.
6. The apparatus of claim 1 , wherein the at least one processor is to boot the operating system after authenticating the user credential.
7. A non-transitory computer readable medium comprising instructions which, when executed, cause a processor to at least:
detect presence of firmware malware, the firmware malware to be executed prior to booting of an operating system of a computing device;
attempt remediation of the firmware malware;
in response to a failure to remediate the firmware malware, cause display of a notification of the presence of the firmware malware;
after display of the notification and before booting the operating system, display a first prompt to request a sequence of characters;
generate an internal override code from a seed code; and
after a determination that an entered sequence of characters matches the internal override code and before booting the operating system, display of a second prompt that is to request a user credential.
8. The non-transitory computer readable medium of claim 7 , wherein the instructions, when executed, cause the processor to:
cause display of the second prompt to request the user credential; and
validate the user credential prior to enabling disk decryption.
9. The non-transitory computer readable medium of claim 8 , wherein the instructions, when executed, cause the processor to enable the disk decryption before booting of the operating system of the computing device.
10. The non-transitory computer readable medium of claim 7 , wherein the instructions, when executed, cause the processor to, in response to the failure to remediate the firmware malware, determine if a boot override is allowed.
11. The non-transitory computer readable medium of claim 7 , wherein the instructions, when executed, cause the processor to, in response to successfully remediating the firmware malware, cause display of a prompt that is to request a user credential.
12. The non-transitory computer readable medium of claim 7 , wherein the instructions, when executed, cause the processor to boot the operating system after authenticating the user credential.
13. A method for firmware malware mitigation, the method comprising:
detecting a presence of firmware malware, the firmware malware to be executed prior to booting of an operating system of a computing device;
attempting remediation of the firmware malware;
in response to a failure to remediate the firmware malware, causing display of a notification of the presence of the firmware malware;
after displaying the notification and before booting the operating system, displaying a first prompt to request a sequence of characters;
generating an internal override code from a seed code; and
after determining that an entered sequence of characters matches the internal override code and before booting the operating system, displaying a second prompt that is to request a user credential.
14. The method of claim 13 , further including causing display of the second prompt to request the user credential before enabling disk decryption.
15. The method of claim 14 , further including enabling the disk decryption before the booting of the operating system of the computing device.
16. The method of claim 13 , further including, in response to the failure to remediate the firmware malware, determining if a boot override is allowed.
17. The method of claim 13 , further including booting the operating system after authenticating the user credential.