Re: Chinese agents slip spy chips into Super Micro servers
Why embed into the motherboard substrate? That's really expensive and subject to failure.
If I were doing this and had that piece of silicon, I'd embed it into the packaging of a chip that's supposed to be there.
Cheaper and more reliable as the chip packaging is designed to do this. At least as hard to detect, possibly more so as multi-die packaging is very common.
Of course, the simplest way to do this kind of thing is to swap out the content of a flash chip.
If this attack is real, I am pretty sure that there was no custom silicon involved whatsoever, it will be a firmware image attack as that's cheaper and harder to detect as there are no visible indicators at all.