Experts Uncover New CosmicStrand UEFI Firmware Rootkit Used by Chinese Hackers


A new class of sophisticated CosmicStrand UEFI firmware rootkit has been identified as being the work of an unidentified Chinese-speaking threat actor.

The rootkit is found in the firmware images of motherboards made by Gigabyte or ASUS, and we found that all of these pictures are connected to models that use the H81 chipset, according to a recent report from Kaspersky researchers. Read More…