​​Webinar "MoonBounce: Internals of the 3rd publicly known UEFI firmware implant" During spring 2021, Kaspersky researchers were made aware of a novel threat against UEFI in the wild. Through careful inspection of firmware scanning logs, it was evident that attackers have modified and deeply embedded an implant within a benign UEFI firmware image. This was done in a way that allowed them to intercept the original execution flow of the machine’s boot sequence and introduce a sophisticated infection chain to run alongside it. We dubbed this discovered implant MoonBounce. In this talk, we will describe in detail how MoonBounce works, as well as outline the story of our investigation, including details that tie it with the activity of the infamous APT41 threat group. Дата проведения: 7 февраля 2022 г., | 19:00 (МСК) Регистрация #вебинар #февраль @InfoBezEvents