MoonBounce
Description
(Kaspersky) The UEFI implant, which was detected in spring 2021 , was found to have been incorporated by the attackers into the CORE_DXE component of the firmware (also known as the DXE Foundation), which is called early on at the DXE (Driver Execution Environment) phase of the UEFI boot sequence. Among other things, this component is responsible for initializing essential data structures and function interfaces, one of which is the EFI Boot Services Table – a set of pointers to routines that are part of the CORE_DXE image itself and are callable by other DXE drivers in the boot chain.
Names
| Name |
|---|
| MoonBounce |
Category
Malware
Type
- Backdoor
- Rootkit
Information
Malpedia
Other Information
Uuid
14ee64fb-dbd7-4884-8f6c-f53a1d0f02a5
Last Card Change
2022-12-27