{"id":6882,"date":"2018-02-27T16:28:00","date_gmt":"2018-02-27T08:28:00","guid":{"rendered":"https:\/\/version-2.com\/?p=6882"},"modified":"2020-06-18T17:55:09","modified_gmt":"2020-06-18T09:55:09","slug":"fighting-persistent-malware-with-a-uefi-scanner-or-whats-it-all-about-uefi","status":"publish","type":"post","link":"https:\/\/version-2.com\/en\/2018\/02\/fighting-persistent-malware-with-a-uefi-scanner-or-whats-it-all-about-uefi\/","title":{"rendered":"Fighting persistent malware with a UEFI scanner, or \u2018What\u2019s it all about UEFI?\u201d"},"content":{"rendered":"<div data-elementor-type=\"wp-post\" data-elementor-id=\"6882\" class=\"elementor elementor-6882\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-34c759d3 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"34c759d3\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;jet_parallax_layout_list&quot;:[{&quot;jet_parallax_layout_image&quot;:{&quot;url&quot;:&quot;&quot;,&quot;id&quot;:&quot;&quot;,&quot;size&quot;:&quot;&quot;},&quot;_id&quot;:&quot;e0cb766&quot;,&quot;jet_parallax_layout_image_tablet&quot;:{&quot;url&quot;:&quot;&quot;,&quot;id&quot;:&quot;&quot;,&quot;size&quot;:&quot;&quot;},&quot;jet_parallax_layout_image_mobile&quot;:{&quot;url&quot;:&quot;&quot;,&quot;id&quot;:&quot;&quot;,&quot;size&quot;:&quot;&quot;},&quot;jet_parallax_layout_speed&quot;:{&quot;unit&quot;:&quot;%&quot;,&quot;size&quot;:50,&quot;sizes&quot;:[]},&quot;jet_parallax_layout_type&quot;:&quot;scroll&quot;,&quot;jet_parallax_layout_direction&quot;:&quot;1&quot;,&quot;jet_parallax_layout_fx_direction&quot;:null,&quot;jet_parallax_layout_z_index&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_x&quot;:50,&quot;jet_parallax_layout_bg_y&quot;:50,&quot;jet_parallax_layout_bg_size&quot;:&quot;auto&quot;,&quot;jet_parallax_layout_animation_prop&quot;:&quot;transform&quot;,&quot;jet_parallax_layout_on&quot;:[&quot;desktop&quot;,&quot;tablet&quot;],&quot;jet_parallax_layout_bg_x_tablet&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_x_mobile&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_y_tablet&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_y_mobile&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_size_tablet&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_size_mobile&quot;:&quot;&quot;}]}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-3cb293bd\" data-id=\"3cb293bd\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-5fe592b8 elementor-widget elementor-widget-text-editor\" data-id=\"5fe592b8\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<img fetchpriority=\"high\" decoding=\"async\" src=\"\/wp-content\/uploads\/2020\/04\/20180313.png\" alt=\"\" width=\"623\" height=\"432\" \/>\n<p>The short answer to the headline\u2019s question is that a UEFI scanner is all about helping you protect your computer against people who seek to take it over by abusing its Unified Extensible Firmware Interface (UEFI). A successful attack on a system\u2019s UEFI can give the attacker complete control of that system, including persistence: the ability to secretly maintain unauthorized access to the machine despite rebooting and\/or reformatting of the hard drive.<\/p>\n<p>As you can imagine, this form of persistence is not a virtue and can prolong the pain and inconvenience of a malicious code infection. If your security software only scan drives and memory, without scanning UEFI, it is possible to think you have a clean machine when you don\u2019t, that\u2019s why we recommend a security solution that scans it, like ESET.<\/p>\n<p><strong>Why does my device have a UEFI?<\/strong><\/p>\n<img decoding=\"async\" src=\"\/wp-content\/uploads\/2020\/04\/UEFI_devices-768x513-1.jpg\" alt=\"\" width=\"768\" height=\"513\" \/>\n<p>Computing devices work by executing code: the instructions that we call software and which make the hardware \u2013 such as a laptop or smartphone \u2013 do something useful. Code can be fed to the device in several ways. For example, it can be read from storage on a disk, held in memory, or delivered via a network connection. But when you power on a digital device it has to start somewhere (bootstrap), and that first piece of code is typically stored in a chip on the device. This code, referred to as firmware, may include a \u201cpower-on self-test\u201d or POST to make sure things are working correctly, followed by the loading into memory of the basic instructions for handling input and output.<\/p>\n<p>If you\u2019ve been into computers for a while you might recognize this chip-based code as BIOS or Basic Input Output System. In fact, BIOS technology dates back to the 1970s and so it is not surprising that it would eventually struggle to meet the demands of today\u2019s computers, a point made by my colleague, Cameron Camp, in this excellent\u00a0<a href=\"https:\/\/www.eset.com\/us\/about\/newsroom\/corporate-blog\/what-is-uefi-scanning-and-why-do-you-need-it-1\/\" target=\"_blank\" rel=\"noreferrer noopener\">article on UEFI scanning<\/a>. As Cameron details, UEFI technology has evolved to replace BIOS, although some devices still refer to it as BIOS. (I\u2019m tempted to say \u201cMeet the new BIOS, same as the old BIOS\u201d but UEFI is signifcantly different, and besides, this article already has a headline that exploits a classic lyric: \u201cWhat\u2019s it all about, Alfie?\u201d)<\/p>\n<p>\u201cFOR MOST PEOPLE, THIS IS THE RIGHT QUESTION TO BE ASKING, AND THE RIGHT ANSWER WILL DEPEND ON WHO YOU ARE\u201d<\/p>\n<p>Technically, UEFI is a specification, maintained by the Unified Extensible Firmware Interface Forum (<a href=\"http:\/\/www.uefi.org\/\" target=\"_blank\" rel=\"noreferrer noopener\">uefi.org<\/a>). According to the forum, the specification defines a new model for the interface between personal computer operating systems and platform firmware, and it \u201cconsists of data tables that contain platform-related information, plus boot and runtime service calls that are available to the operating system and its boot loader.\u201d Without going into greater technical detail, UEFI added a great deal of functionality to the boot process, including some serious security measures (these are discussed in the \u00a0<a href=\"https:\/\/www.welivesecurity.com\/2017\/01\/05\/windows-exploitation-2016\/\" target=\"_blank\" rel=\"noreferrer noopener\">ESET white paper referenced by this article<\/a>).<\/p>\n<p>Unfortunately, the illicit benefits of devising code that can surreptitiously take over a system early in the boot process \u2013 generically referred to as a bootkit \u2013 are a powerful motivator to the folks who specialize in unauthorized access to digital devices. Such folks could be: cybercriminals; domestic and foreign agencies like NSA and CIA; and private companies that sell \u201csurveillance tools\u201d to governments.<\/p>\n<p>For more details, check out\u00a0<a href=\"https:\/\/www.welivesecurity.com\/2017\/10\/19\/malware-firmware-exploit-sense-security\/\" target=\"_blank\" rel=\"noreferrer noopener\">the excellent article<\/a>\u00a0by my ESET colleague Cassius Puodzius that discusses these \u201cthreat actors\u201d and their interest in UEFI. The broader topic of bootkit evolution from early days through 2012 is ably covered by ESET Senior Research Fellow, David Harley,\u00a0<a href=\"https:\/\/www.welivesecurity.com\/2012\/01\/03\/bootkit-threat-evolution-in-2011-2\/\" target=\"_blank\" rel=\"noreferrer noopener\">in this article<\/a>. You might also check out the paper \u201c<a href=\"https:\/\/www.virusbulletin.com\/uploads\/pdf\/conference\/vb2014\/VB2014-RodionovMatrosov.pdf\" target=\"_blank\" rel=\"noreferrer noopener\">Bootkits, Past, Present, and Future<\/a>\u201d, presented at Virus Bulletin 2014. And of course there are plenty of\u00a0<a href=\"http:\/\/www.uefi.org\/learning_center\/papers\" target=\"_blank\" rel=\"noreferrer noopener\">technical papers on the UEFI Forum site<\/a>.<\/p>\n<p><strong>So what\u2019s my UEFI risk?<\/strong><\/p>\n<p>For most people, this is the right question to be asking, and the right answer will depend on who you are. For example, are you someone whose computer might be of interest to the NSA or CIA or other government entity that has the resources to invest in code that abuses UEFI, either its own code or a commercial surveillance product purchased from a commercial vendor? Are you using your computer to develop, review, or otherwise handle intellectual property worth stealing? If you answered either of those questions in the affirmative, then I would say you have an above average risk of encountering UEFI malware.<\/p>\n<p>Currently, I am not aware of any large-scale, broadly-targeted criminal malware campaigns that exploit UEFI to attack the general public\u2019s computer systems (if you know of any, please share the knowledge). However, even if you are not in a high risk category, I strongly suggest you still need security software with UEFI scanning capability. Why? Remember those three letter agencies that have been developing UEFI attacks? Well, they don\u2019t have a stellar reputation for keeping their tools secret. In fact, the biggest news in malware so far this year has been WannaCryptor a.k.a. WannaCry, and one reason that particular ransomware spread so fast was because it used a \u201ctop secret\u201d exploit developed by the NSA, an agency known to have dabbled in UEFI compromise.<\/p>\n<p>In other words, we just don\u2019t know when a new malware campaign that abuses UEFI to maintain persistence on compromised systems will appear in the wild. What I can say is that folks who are performing UEFI scans on a regular basis will be better prepared to protect their systems from future malware than people who are not. And that is what UEFI scanning is all about.<\/p>\n<p>ESET latest endpoint\u00a0<a href=\"https:\/\/www.eset.hk\/home\/antivirus\/\" target=\"_blank\" rel=\"noreferrer noopener\">security products<\/a>\u00a0now include an industry first UEFI scanning.<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p><strong>About Version 2 Limited<\/strong><\/p>\n<p>Version 2 Limited is one of the most dynamic IT companies in Asia. The company develops and distributes IT products for Internet and IP-based networks, including communication systems, Internet software, security, network, and media products. Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 Limited offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.<\/p>\n<p>&nbsp;<\/p>\n<p><strong>About ESET<\/strong><\/p>\n<p>Founded in 1992, ESET is a global provider of security software for enterprises and consumers. ESET\u2019s award-winning, antivirus software system, NOD32, provides real-time protection from known and unknown viruses, spyware, rootkits and other malware. ESET NOD32 offers the smallest, fastest and most advanced protection available, with more Virus Bulletin 100 Awards than any other antivirus product. ESET was named to Deloitte\u2019s Technology Fast 500 five years running, and has an extensive partner network, including corporations like Canon, Dell and Microsoft. ESET has offices in Bratislava, SK; Bristol, U.K.; Buenos Aires, AR; Prague, CZ; San Diego, USA; and is represented worldwide in more than 100 countries.\u00a0<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"<p>The short answer to the headline\u2019s question is that a U [&hellip;]<\/p>","protected":false},"author":143524195,"featured_media":6846,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_wpcom_ai_launchpad_first_post":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":false},"categories":[131,40,61,102],"tags":[163,188,16,41],"class_list":["post-6882","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-v2","category-eset","category-press-release","category-year2018","tag-163","tag-uefi","tag-malware","tag-eset"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Fighting persistent malware with a UEFI scanner, or \u2018What\u2019s it all about UEFI?\u201d - Version 2<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/version-2.com\/en\/2018\/02\/fighting-persistent-malware-with-a-uefi-scanner-or-whats-it-all-about-uefi\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Fighting persistent malware with a UEFI scanner, or \u2018What\u2019s it all about UEFI?\u201d - Version 2\" \/>\n<meta property=\"og:description\" content=\"The short answer to the headline\u2019s question is that a U [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/version-2.com\/en\/2018\/02\/fighting-persistent-malware-with-a-uefi-scanner-or-whats-it-all-about-uefi\/\" \/>\n<meta property=\"og:site_name\" content=\"Version 2\" \/>\n<meta property=\"article:published_time\" content=\"2018-02-27T08:28:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2020-06-18T09:55:09+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/i0.wp.com\/version-2.com\/wp-content\/uploads\/2020\/04\/20180313.png?fit=623%2C432&ssl=1\" \/>\n\t<meta property=\"og:image:width\" content=\"623\" \/>\n\t<meta property=\"og:image:height\" content=\"432\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"version2hk\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"version2hk\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/version-2.com\\\/en\\\/2018\\\/02\\\/fighting-persistent-malware-with-a-uefi-scanner-or-whats-it-all-about-uefi\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/version-2.com\\\/en\\\/2018\\\/02\\\/fighting-persistent-malware-with-a-uefi-scanner-or-whats-it-all-about-uefi\\\/\"},\"author\":{\"name\":\"version2hk\",\"@id\":\"https:\\\/\\\/version-2.com\\\/zh\\\/#\\\/schema\\\/person\\\/d14d2d3cd77ffdb618b9f1330fe084db\"},\"headline\":\"Fighting persistent malware with a UEFI scanner, or \u2018What\u2019s it all about UEFI?\u201d\",\"datePublished\":\"2018-02-27T08:28:00+00:00\",\"dateModified\":\"2020-06-18T09:55:09+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/version-2.com\\\/en\\\/2018\\\/02\\\/fighting-persistent-malware-with-a-uefi-scanner-or-whats-it-all-about-uefi\\\/\"},\"wordCount\":1178,\"publisher\":{\"@id\":\"https:\\\/\\\/version-2.com\\\/zh\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/version-2.com\\\/en\\\/2018\\\/02\\\/fighting-persistent-malware-with-a-uefi-scanner-or-whats-it-all-about-uefi\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/version-2.com\\\/wp-content\\\/uploads\\\/2020\\\/04\\\/20180313.png\",\"keywords\":[\"2018\",\"UEFI\",\"Malware\",\"ESET\"],\"articleSection\":[\"Version 2 Limited\",\"ESET\",\"Press Release\",\"2018\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/version-2.com\\\/en\\\/2018\\\/02\\\/fighting-persistent-malware-with-a-uefi-scanner-or-whats-it-all-about-uefi\\\/\",\"url\":\"https:\\\/\\\/version-2.com\\\/en\\\/2018\\\/02\\\/fighting-persistent-malware-with-a-uefi-scanner-or-whats-it-all-about-uefi\\\/\",\"name\":\"Fighting persistent malware with a UEFI scanner, or \u2018What\u2019s it all about UEFI?\u201d - Version 2\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/version-2.com\\\/zh\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/version-2.com\\\/en\\\/2018\\\/02\\\/fighting-persistent-malware-with-a-uefi-scanner-or-whats-it-all-about-uefi\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/version-2.com\\\/en\\\/2018\\\/02\\\/fighting-persistent-malware-with-a-uefi-scanner-or-whats-it-all-about-uefi\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/version-2.com\\\/wp-content\\\/uploads\\\/2020\\\/04\\\/20180313.png\",\"datePublished\":\"2018-02-27T08:28:00+00:00\",\"dateModified\":\"2020-06-18T09:55:09+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/version-2.com\\\/en\\\/2018\\\/02\\\/fighting-persistent-malware-with-a-uefi-scanner-or-whats-it-all-about-uefi\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/version-2.com\\\/en\\\/2018\\\/02\\\/fighting-persistent-malware-with-a-uefi-scanner-or-whats-it-all-about-uefi\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/version-2.com\\\/en\\\/2018\\\/02\\\/fighting-persistent-malware-with-a-uefi-scanner-or-whats-it-all-about-uefi\\\/#primaryimage\",\"url\":\"https:\\\/\\\/version-2.com\\\/wp-content\\\/uploads\\\/2020\\\/04\\\/20180313.png\",\"contentUrl\":\"https:\\\/\\\/version-2.com\\\/wp-content\\\/uploads\\\/2020\\\/04\\\/20180313.png\",\"width\":623,\"height\":432},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/version-2.com\\\/en\\\/2018\\\/02\\\/fighting-persistent-malware-with-a-uefi-scanner-or-whats-it-all-about-uefi\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u9996\u9801\",\"item\":\"https:\\\/\\\/version-2.com\\\/zh\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Fighting persistent malware with a UEFI scanner, or \u2018What\u2019s it all about UEFI?\u201d\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/version-2.com\\\/zh\\\/#website\",\"url\":\"https:\\\/\\\/version-2.com\\\/zh\\\/\",\"name\":\"Version 2\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/version-2.com\\\/zh\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/version-2.com\\\/zh\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/version-2.com\\\/zh\\\/#organization\",\"name\":\"Version 2\",\"url\":\"https:\\\/\\\/version-2.com\\\/zh\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/version-2.com\\\/zh\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/i0.wp.com\\\/version-2.com\\\/wp-content\\\/uploads\\\/2020\\\/08\\\/v2-hk-hor-4.png?fit=1795%2C335&ssl=1\",\"contentUrl\":\"https:\\\/\\\/i0.wp.com\\\/version-2.com\\\/wp-content\\\/uploads\\\/2020\\\/08\\\/v2-hk-hor-4.png?fit=1795%2C335&ssl=1\",\"width\":1795,\"height\":335,\"caption\":\"Version 2\"},\"image\":{\"@id\":\"https:\\\/\\\/version-2.com\\\/zh\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/version-2.com\\\/zh\\\/#\\\/schema\\\/person\\\/d14d2d3cd77ffdb618b9f1330fe084db\",\"name\":\"version2hk\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d280627252b42d7489de74dd88aa04043a495f25e258575000dc767e287bf94c?s=96&d=identicon&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d280627252b42d7489de74dd88aa04043a495f25e258575000dc767e287bf94c?s=96&d=identicon&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d280627252b42d7489de74dd88aa04043a495f25e258575000dc767e287bf94c?s=96&d=identicon&r=g\",\"caption\":\"version2hk\"},\"sameAs\":[\"http:\\\/\\\/version2xfortcom.wordpress.com\"],\"url\":\"https:\\\/\\\/version-2.com\\\/en\\\/author\\\/version2hk\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Fighting persistent malware with a UEFI scanner, or \u2018What\u2019s it all about UEFI?\u201d - Version 2","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/version-2.com\/en\/2018\/02\/fighting-persistent-malware-with-a-uefi-scanner-or-whats-it-all-about-uefi\/","og_locale":"en_US","og_type":"article","og_title":"Fighting persistent malware with a UEFI scanner, or \u2018What\u2019s it all about UEFI?\u201d - Version 2","og_description":"The short answer to the headline\u2019s question is that a U [&hellip;]","og_url":"https:\/\/version-2.com\/en\/2018\/02\/fighting-persistent-malware-with-a-uefi-scanner-or-whats-it-all-about-uefi\/","og_site_name":"Version 2","article_published_time":"2018-02-27T08:28:00+00:00","article_modified_time":"2020-06-18T09:55:09+00:00","og_image":[{"width":623,"height":432,"url":"https:\/\/i0.wp.com\/version-2.com\/wp-content\/uploads\/2020\/04\/20180313.png?fit=623%2C432&ssl=1","type":"image\/png"}],"author":"version2hk","twitter_card":"summary_large_image","twitter_misc":{"Written by":"version2hk","Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/version-2.com\/en\/2018\/02\/fighting-persistent-malware-with-a-uefi-scanner-or-whats-it-all-about-uefi\/#article","isPartOf":{"@id":"https:\/\/version-2.com\/en\/2018\/02\/fighting-persistent-malware-with-a-uefi-scanner-or-whats-it-all-about-uefi\/"},"author":{"name":"version2hk","@id":"https:\/\/version-2.com\/zh\/#\/schema\/person\/d14d2d3cd77ffdb618b9f1330fe084db"},"headline":"Fighting persistent malware with a UEFI scanner, or \u2018What\u2019s it all about UEFI?\u201d","datePublished":"2018-02-27T08:28:00+00:00","dateModified":"2020-06-18T09:55:09+00:00","mainEntityOfPage":{"@id":"https:\/\/version-2.com\/en\/2018\/02\/fighting-persistent-malware-with-a-uefi-scanner-or-whats-it-all-about-uefi\/"},"wordCount":1178,"publisher":{"@id":"https:\/\/version-2.com\/zh\/#organization"},"image":{"@id":"https:\/\/version-2.com\/en\/2018\/02\/fighting-persistent-malware-with-a-uefi-scanner-or-whats-it-all-about-uefi\/#primaryimage"},"thumbnailUrl":"https:\/\/version-2.com\/wp-content\/uploads\/2020\/04\/20180313.png","keywords":["2018","UEFI","Malware","ESET"],"articleSection":["Version 2 Limited","ESET","Press Release","2018"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/version-2.com\/en\/2018\/02\/fighting-persistent-malware-with-a-uefi-scanner-or-whats-it-all-about-uefi\/","url":"https:\/\/version-2.com\/en\/2018\/02\/fighting-persistent-malware-with-a-uefi-scanner-or-whats-it-all-about-uefi\/","name":"Fighting persistent malware with a UEFI scanner, or \u2018What\u2019s it all about UEFI?\u201d - Version 2","isPartOf":{"@id":"https:\/\/version-2.com\/zh\/#website"},"primaryImageOfPage":{"@id":"https:\/\/version-2.com\/en\/2018\/02\/fighting-persistent-malware-with-a-uefi-scanner-or-whats-it-all-about-uefi\/#primaryimage"},"image":{"@id":"https:\/\/version-2.com\/en\/2018\/02\/fighting-persistent-malware-with-a-uefi-scanner-or-whats-it-all-about-uefi\/#primaryimage"},"thumbnailUrl":"https:\/\/version-2.com\/wp-content\/uploads\/2020\/04\/20180313.png","datePublished":"2018-02-27T08:28:00+00:00","dateModified":"2020-06-18T09:55:09+00:00","breadcrumb":{"@id":"https:\/\/version-2.com\/en\/2018\/02\/fighting-persistent-malware-with-a-uefi-scanner-or-whats-it-all-about-uefi\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/version-2.com\/en\/2018\/02\/fighting-persistent-malware-with-a-uefi-scanner-or-whats-it-all-about-uefi\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/version-2.com\/en\/2018\/02\/fighting-persistent-malware-with-a-uefi-scanner-or-whats-it-all-about-uefi\/#primaryimage","url":"https:\/\/version-2.com\/wp-content\/uploads\/2020\/04\/20180313.png","contentUrl":"https:\/\/version-2.com\/wp-content\/uploads\/2020\/04\/20180313.png","width":623,"height":432},{"@type":"BreadcrumbList","@id":"https:\/\/version-2.com\/en\/2018\/02\/fighting-persistent-malware-with-a-uefi-scanner-or-whats-it-all-about-uefi\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u9996\u9801","item":"https:\/\/version-2.com\/zh\/"},{"@type":"ListItem","position":2,"name":"Fighting persistent malware with a UEFI scanner, or \u2018What\u2019s it all about UEFI?\u201d"}]},{"@type":"WebSite","@id":"https:\/\/version-2.com\/zh\/#website","url":"https:\/\/version-2.com\/zh\/","name":"Version 2","description":"","publisher":{"@id":"https:\/\/version-2.com\/zh\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/version-2.com\/zh\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/version-2.com\/zh\/#organization","name":"Version 2","url":"https:\/\/version-2.com\/zh\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/version-2.com\/zh\/#\/schema\/logo\/image\/","url":"https:\/\/i0.wp.com\/version-2.com\/wp-content\/uploads\/2020\/08\/v2-hk-hor-4.png?fit=1795%2C335&ssl=1","contentUrl":"https:\/\/i0.wp.com\/version-2.com\/wp-content\/uploads\/2020\/08\/v2-hk-hor-4.png?fit=1795%2C335&ssl=1","width":1795,"height":335,"caption":"Version 2"},"image":{"@id":"https:\/\/version-2.com\/zh\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/version-2.com\/zh\/#\/schema\/person\/d14d2d3cd77ffdb618b9f1330fe084db","name":"version2hk","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/d280627252b42d7489de74dd88aa04043a495f25e258575000dc767e287bf94c?s=96&d=identicon&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/d280627252b42d7489de74dd88aa04043a495f25e258575000dc767e287bf94c?s=96&d=identicon&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/d280627252b42d7489de74dd88aa04043a495f25e258575000dc767e287bf94c?s=96&d=identicon&r=g","caption":"version2hk"},"sameAs":["http:\/\/version2xfortcom.wordpress.com"],"url":"https:\/\/version-2.com\/en\/author\/version2hk\/"}]}},"jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/pbQRKm-1N0","jetpack_featured_media_url":"https:\/\/version-2.com\/wp-content\/uploads\/2020\/04\/20180313.png","post_mailing_queue_ids":[],"_links":{"self":[{"href":"https:\/\/version-2.com\/en\/wp-json\/wp\/v2\/posts\/6882","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/version-2.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/version-2.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/version-2.com\/en\/wp-json\/wp\/v2\/users\/143524195"}],"replies":[{"embeddable":true,"href":"https:\/\/version-2.com\/en\/wp-json\/wp\/v2\/comments?post=6882"}],"version-history":[{"count":5,"href":"https:\/\/version-2.com\/en\/wp-json\/wp\/v2\/posts\/6882\/revisions"}],"predecessor-version":[{"id":15537,"href":"https:\/\/version-2.com\/en\/wp-json\/wp\/v2\/posts\/6882\/revisions\/15537"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/version-2.com\/en\/wp-json\/wp\/v2\/media\/6846"}],"wp:attachment":[{"href":"https:\/\/version-2.com\/en\/wp-json\/wp\/v2\/media?parent=6882"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/version-2.com\/en\/wp-json\/wp\/v2\/categories?post=6882"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/version-2.com\/en\/wp-json\/wp\/v2\/tags?post=6882"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}