Latest FinFisher spyware upgrades 'particularly worrying,' says Kaspersky September 28, 2021 https://www.theregister.com/2021/09/28/kasperky_finfisher_spyware_report/ Kaspersky: FinSpy: unseen findings
It didn't became clear to me how they can infect the UEFI, can this be blocked somehow? For example, some anti-malware tools like HMPA and AppCheck block modification of the MBR in order to protect against certain types of ransomware. And of course Secure Boot should normally also protect against bootkits.
