First UEFI malware discovered

[kukamuumuka]

One good reason for not to use UEFI.
https://arstechnica.com/information-tec ... -russians/

ESET Research has published a paper detailing the discovery of a malware campaign that used repurposed commercial software to create a backdoor in computers’ firmware—a “rootkit," active since at least early 2017 and capable of surviving the re-installation of the Windows operating system or even hard drive replacement. While the malware had been spotted previously, ESET’s research is the first to show that it was actively attacking the firmware of computers to establish a tenacious foothold.

[Pierre]

Yeah Well - was just a Matter of Time, really.

Dubbed “LoJax,” the malware is the first case of an attack leveraging the Unified Extensible Firmware Interface (UEFI) boot system - being used in an attack by an adversary .. ..

[gm10]

One good reason for not to use UEFI.

Bootkits exist for both BIOS and UEFI and have been around for a while:
https://www.webroot.com/blog/2011/09/13 ... -the-wild/

[Faust]

Bootkits exist for both BIOS and UEFI and have been around for a while:
https://www.webroot.com/blog/2011/09/13 ... -the-wild/

Although outdated , that link makes for some fascinating reading .
Thanks for posting .

When the malware is dissected into steps like that , it clearly shows that no one step is actually that difficult ,
at least not to anyone with a handful of coding skills , in a few key areas .

[gomerpile]

This is why tpm are the best security one can get. Without one is like drinking and driving going through a ride check point.

[kukamuumuka]

This is why tpm are the best security one can get. Without one is like drinking and driving going through a ride check point.

Even better is an old mechanical cmos switch. Unfortunately in modern computers have no mechanical switches.

[BG405]

Easy fix, if you can get at the coin cell or reset jumper.

Easier prevention, don't run Windows or at least don't get software from untrusted sources; in particular piracy a.k.a. filesharing sites.