Malware built into imported electronic components sold in the United States poses a serious threat to US economy and security, Greg Schaffer, acting Deputy Undersecretary for the National Protection and Programmes Directorate at the US Department of Homeland Security (DHS) has said.

Greg Schaffer said the threat is “one of the most complicated and difficult challenges we have”. In a testimony before the House Oversight and Government Reform Committee, he said that the threat is “one of the most complicated and difficult challenges we have,” adding that he is “aware that there are instances where that has happened.”

Schaffer said that cyber-securing the US supply chain requires securing the multiple steps of the supply chain — product assembly and acquisition, data sharing among partners, governance, and more — to ensure components of devices such as laptops and smartphones are not already infected by malware before they are sold.