A new vulnerability known as Thunderstrike II is called “A dangerous plague.” It has been identified to attack firmware and the Apple firmware is vulnerable to this new worm. The attack happens at the BIOS level and is targeted at the computer’s firmware.
When you power on your computer, the EFI firmware boots up and launches the operating system. Often times, the firmware is vulnerable because it’s not signed by the manufacturer, and sometimes there is nothing preventing users from loading illegitimate firmware files. Because the firmware remains even if the machine is wiped or restored, the attack is persistent.
