Malware Buried Deep Down the SPI Flash: Sednit's First UEFI Rootkit Found in the Wild

BIOS rootkits have been researched and discussed heavily in the past few years, but sparse evidence has been presented of real campaigns actively trying to compromise systems at this level. Our talk will reveal such a campaign successfully executed by the Sednit group. This APT group, also known as Fancy Bear, Sofacy and APT28, has been linked to numerous high profile cyberattacks such as the 2016 Democratic National Committee email leak scandal. By Jean-Ian Boutin & Frederic Vachon Full Abstract & Presentation Materials: https://www.blackhat.com/eu-18/briefi...