UEFI uses malicious samples to track in opposition
1 UEFI is used in the wild
Https://www.welivesecurity.com/2018/09/27/lojax-first-uefi-rootkit-found-wild-courtesy-sednit-group/
2 IOC list
Https://github.com/eset/malware-ioc/tree/master/sednit#lojax-first-uefi-rootkit-found-in-the-wild-courtesy-of-the-sednit-group
3 complete report
Https://www.welivesecurity.com/wp-content/uploads/2018/09/ESET-LoJax.pdf
