https://www.welivesecurity.com/wp-content/uploads/2018/09/ESET-LoJax.pdfFrom the paper:
"This white paper is divided into three sections. The first will deal with previous security research on LoJack/Computrace and how it could be used maliciously. The second section will examine the breadcrumbs found along our research route that ultimately led us to the UEFI rootkit. Finally, the third section will detail the different LoJax components and how they persist on a system even after a Windows re-install or a hard drive replacement."
More commentary:
https://www.enterpriseinnovation.net/article/first-ever-known-cyber-attack-uefi-firmware-1059461717https://arstechnica.com/information-technology/2018/10/first-uefi-malware-discovered-in-wild-is-lapt...This isn't getting enough attention.