{"id":137185,"date":"2022-03-21T09:02:37","date_gmt":"2022-03-21T16:02:37","guid":{"rendered":"https:\/\/lifeboat.com\/blog\/2022\/03\/malware-that-can-survive-os-reinstalls-strikes-again-likely-for-cyberespionage"},"modified":"2022-03-21T09:02:37","modified_gmt":"2022-03-21T16:02:37","slug":"malware-that-can-survive-os-reinstalls-strikes-again-likely-for-cyberespionage","status":"publish","type":"post","link":"https:\/\/lifeboat.com\/blog\/2022\/03\/malware-that-can-survive-os-reinstalls-strikes-again-likely-for-cyberespionage","title":{"rendered":"Malware That Can Survive OS Reinstalls Strikes Again, Likely for Cyberespionage"},"content":{"rendered":"<p><a class=\"aligncenter blog-photo\" href=\"https:\/\/lifeboat.com\/blog.images\/malware-that-can-survive-os-reinstalls-strikes-again-likely-for-cyberespionage2.jpg\"><\/a><\/p>\n<p>A new <a href=\"https:\/\/www.pcmag.com\/picks\/the-best-malware-removal-and-protection-software\">malware<\/a> strain that can survive operating system reinstalls was spotted last year secretly hiding on a computer, according to the antivirus provider <a href=\"https:\/\/www.pcmag.com\/reviews\/kaspersky-anti-virus\">Kaspersky<\/a>.<\/p>\n<p>The company <a href=\"https:\/\/usa.kaspersky.com\/about\/press-releases\/2022_kaspersky-uncovers-third-known-firmware-bootkit\" target=\"_blank\">discovered<\/a> the Windows-based malware last spring running on a single computer. How the malicious code infected the system remains unclear. But the malware was designed to operate on the computer\u2019s <a href=\"https:\/\/www.pcmag.com\/encyclopedia\/term\/uefi\">UEFI<\/a> firmware, which helps boot up the system.<\/p>\n<p>The malware, dubbed <a href=\"https:\/\/securelist.com\/moonbounce-the-dark-side-of-uefi-firmware\/105468\/\" target=\"_blank\">MoonBounce<\/a>, is especially scary because it installs itself on the motherboard\u2019s SPI flash memory, instead of the computer\u2019s storage drive. Hence, the malware can persist even if you reinstall the computer\u2019s OS or swap out the storage.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>A new malware strain that can survive operating system reinstalls was spotted last year secretly hiding on a computer, according to the antivirus provider Kaspersky. The company discovered the Windows-based malware last spring running on a single computer. How the malicious code infected the system remains unclear. But the malware was designed to operate on [\u2026]<\/p>\n","protected":false},"author":662,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[34],"tags":[],"class_list":["post-137185","post","type-post","status-publish","format-standard","hentry","category-cybercrime-malcode"],"_links":{"self":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts\/137185","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/users\/662"}],"replies":[{"embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/comments?post=137185"}],"version-history":[{"count":0,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts\/137185\/revisions"}],"wp:attachment":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/media?parent=137185"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/categories?post=137185"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/tags?post=137185"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}