• breakingcups@lemmy.world
    link
    fedilink
    arrow-up
    3
    ·
    1 month ago

    This does not require a supply chain attack, just a user ignorantly clicking yes on a UAC prompt. After which the machine is forever compromised, even after replacing ssds / hdds.

      • Breadhax0r@lemmy.world
        link
        fedilink
        arrow-up
        2
        ·
        1 month ago

        From my understanding it allows malicious code to be installed in protected memory on the CPU itself, so you can’t get rid of it once it’s there without a lot of extra work