A newly discovered and previously undocumented UEFI bootkit has been used by attackers to backdoor Windows systems by hijacking the Windows Boot Manager since 2012. The bootkit, dubbed ESPecter by ESET researchers who found it, achieves persistence on the EFI System Partition of compromised devices by loading its own unsigned driver to bypass Windows Driver Signature Enforcement. The malicious driver deployed on compromised Windows computers is used to load two payloads (WinSys.dll and Client.dll) that can also download and execute additional malware.”]