New Intel firmware boot verification bypass enables low-level backdoors

Researchers have found a new way to defeat the boot verification process for some Intel-based systems. The technique can also be used to compromise machines in a stealthy and persistent way. The attack is a time-of-check attack against the Boot Guard feature of the reference Unified Extensible Firmware Interface (UEFI) implementation at the Hack in the Box conference in Amsterdam this week. Such a physical attack would take 15 to 20 minutes for an experienced attacker with the right tools to attack the system.”]

Source: https://www.csoonline.com/article/3393255/new-intel-firmware-boot-verification-bypass-enables-low-level-backdoors.html