CosmicStrand, a fresh iteration of the UEFI rootkit popular with Chinese-speaking hackers, was identified by Kaspersky researchers. Since at least 2016, threat actors have targeted users in China, Vietnam, Iran, and Russia with this malware.
Although CosmicStrand has been discovered on computers with ASUS and Gigabyte motherboards, researchers are unaware of how the attackers originally obtained access to the targeted computers. Read More…