#csmcore

Discovery of new UEFI rootkit exposes an ugly truth: The attacks are invisible to us

Turns out they’re not all that rare. We just don’t know how to find them. Researchers have unpacked a major cybersecurity find—a malicious UEFI-based rootkit used in the wild since 2016 to ensure computers remained infected even if an operating system is reinstalled or a hard drive is completely replaced. The firmware compromises the UEFI, the low-level and highly opaque chain of firmware…