Companies report several of their products are vulnerable to Trickbot malware. Trickbot features a bootkit module, nicknamed Trickboot, which can search for UEFI/BIOS vulnerabilities. Supermicro and PulseSecure issued advisories on Trickboot this past week. Trickboot is capable of discovering vulnerabilities and enabling attackers to read/write/erase a device’s BIOS. It is generally distributed “as-a-service” with Symantec attributing its use to the Wizard Spider group.”]
Source: https://www.databreachtoday.com/supermicro-pulsesecure-issue-advisories-on-trickboot-a-16131