Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
6 IOCs
Trusted UEFI Certificates Exploited to Bypass Kernel Security Protections
Excerpt
A critical firmware-level attack vector that affects multiple vendor-signed UEFI applications, enabling attackers to bypass Secure Boot protections and execute arbitrary Code before the operating system loads. Discovered by Martin Smolar of ESET, the vulnerability mirrors a “Bring Your Own Vulnerable Driver” (BYOVD) approach but targets the pre-boot environment rather than the OS kernel. The Unified Extensible Firmware Interface (UEFI) standard governs how modern…
Read the original report →Attack Flow5 steps · MITRE ATT&CK mapped
Indicators of Compromise
Open the mindmap →6 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| SHA1 | dc18d31e46a541c9e42f9588554addc7dece124b | Medium | Score 53/100 | First seen |
| SHA1 | 71dce405964c67779db92dbc01f683d6e29075ab | Medium | Score 53/100 | First seen |
| SHA1 | 744565fbb35db710bcc1547292204763c731dc55 | Medium | Score 53/100 | First seen |
| SHA1 | 2eae2807a4265d9c30eeca68a8c59c7a6d1acfe7 | Medium | Score 53/100 | First seen |
| SHA1 | d275c2dfd884d2b7842c7f861c527a9ffc6e59dd | Medium | Score 53/100 | First seen |
| SHA1 | 35fbd8ed5ed31d281a6146360cdefe7e8cec31da | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…