corpus.blog
41,554 blogs · 5,225,211 posts Claim your blog
Record · corpus.blog/posts/01a0ca90-59e9-72a0-b869-6bde0d887c10

MoonBounce: the dark side of UEFI firmware

Kaspersky Securelist · published 20 January 2022

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at securelist.com Wayback capture
2blogs citing
First cited
26 Jan 2022
Most recent
11 Dec 2025
Rank this month
not ranked
External links
40
Words captured
4,573

Cited by

Blog
In the post
Date
telefoncek.si
Rootkits - how deep the rabbit hole is? Read at the source ↗
11 Dec 2025
Suramya's Blog
New MoonBounce UEFI Bootkit that can’t be removed by replacing the Hard Disk Read at the source ↗
26 Jan 2022

Links from this post

Link
Host
https://www.kaspersky.com/enterprise-security/wiki-section/products/anti-rootkit-and-remediation-technology
kaspersky.com
https://www.reuters.com/article/us-china-cyber-moonlighters-idUSKCN1UX1JE
reuters.com
https://www.welivesecurity.com/2021/10/05/uefi-threats-moving-esp-introducing-especter-bootkit/
welivesecurity.com
https://www.welivesecurity.com/2018/09/27/lojax-first-uefi-rootkit-found-wild-courtesy-sednit-group/
welivesecurity.com
https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2022/01/19115831/MoonBounce_technical-details_eng.pdf
media.kasperskycontenthub.com
https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2022/01/26095331/MoonBounce_the_dark_side_of_UEFI_firmware_01.png
media.kasperskycontenthub.com
https://www.trendmicro.com/vinfo/us/security/news/cybercrime-and-digital-threats/earth-baku-returns?utm_source=trendmicroresearch&utm_medium=smk&utm_campaign=0821_EarthBaku1
trendmicro.com
https://www.welivesecurity.com/2021/08/24/sidewalk-may-be-as-dangerous-as-crosswalk/
welivesecurity.com
https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2022/01/13211852/MoonBounce_the_dark_side_of_UEFI_firmware_02.png
media.kasperskycontenthub.com
https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2018/03/07170759/Microcin_Technical_4PDF_eng_final_s.pdf
media.kasperskycontenthub.com
https://github.com/jas502n/mimikat_ssp
github.com
https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2022/01/13212702/MoonBounce_the_dark_side_of_UEFI_firmware_03.png
media.kasperskycontenthub.com
https://attack.mitre.org/techniques/T1003/004/
attack.mitre.org
https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2022/01/13213606/MoonBounce_the_dark_side_of_UEFI_firmware_04.png
media.kasperskycontenthub.com
https://content.fireeye.com/apt-41/rpt-apt41/
content.fireeye.com
https://s3.documentcloud.org/documents/7210602/FLASH-AC-000133-TT-Published.pdf
s3.documentcloud.org
https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2022/01/13213828/MoonBounce_the_dark_side_of_UEFI_firmware_05.png
media.kasperskycontenthub.com
https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2022/01/13213937/MoonBounce_the_dark_side_of_UEFI_firmware_06.png
media.kasperskycontenthub.com
https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2022/01/13214018/MoonBounce_the_dark_side_of_UEFI_firmware_07.png
media.kasperskycontenthub.com
https://www.justice.gov/opa/pr/seven-international-cyber-defendants-including-apt41-actors-charged-connection-computer
justice.gov
https://opentip.kaspersky.com/D94962550B90DDB3F80F62BD96BD9858/?utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/C3B153347AED27435A18E789D8B67E0A/?utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/4D5EB9F6F501B4F6EDF981A3C6C4D6FA/?utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/E7155C355C90DC113476DDCF765B187D/?utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/899608DE6B59C63B4AE219C3C13502F5/?utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/4EF90CEEF2CC9FF3121B34A9891BB28D/?utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/CFF2772C44F6F86661AB0A4FFBF86833/?utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/5F9020983A61446A77AF1976247C443D/?utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/0603C8AAECBDC523CBD3495E93AFB20C/?utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/8C7598061D1E8741B8389A80BFD8B8F5/?utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/F9F9D6FB3CB94B1CDF9E437141B59E16/?utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/5FE6CE9C48D0AE98EC2CA1EC9759AAD9/?utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/50FF717A8E3106DDBF00FB42212879C5/?utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/D98614600775781673B6DF397CC4F476/?utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/C9B250099E2DD27BB4170836AC480FE0/?utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/97EF7B8FCDCB0C0D9FBB93D0F7E6E3B6/?utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/4E4388D7967E0433D400C60475974D50/?utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/5F1C7602688E67F299F5BD533FA07880/?utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/45E862964EF4EFDEA181F3927D20E96D/?utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/4BC82105403974AA24BF02CFB66B8F7C/?utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
Elsewhere on securelist.com (6)