A Unified Extensible Firmware Interface (UEFI) rootkit, labelled CosmicStrand, has been identified in the firmware images of motherboards manufactured by Taiwan-based ASUS and Gigabyte. CosmicStrand victims, all of whom appear to be private individuals with no links to a common organisation or sector, have been identified in China, Vietnam, Iran, and Russia.

Download the report