The attack vector is available for rent at scale, and evades AV and EDR, leaving YARA analysis as the best detection option.

ESET researchers discovered 11 vulnerable UEFI shim bootloaders signed by Microsoft that allow attackers to bypass UEFI ...