Is There an EFI Monster Inside Your Apple
Dive into the world of EFI firmware vulnerabilities in Apple devices in this eye-opening conference talk presented by Pedro Vilaça at the 44CON Information Security Conference. Explore the implications of a publicly disclosed Apple EFI firmware zero-day vulnerability that allows direct access to the EFI firmware from the operating system. Learn about the power and stealth of EFI rootkits, their ability to evade forensics, and their potential for long-term persistence. Gain insights into the secretive world of EFI monsters, their similarities to elusive jaguars, and their likely inclusion in spy agencies' rootkit arsenals. Discover the scarcity of tools available for detecting these threats and get an introduction to the EFI world, demystifying its complexities and revealing its accessibility and excitement for security enthusiasts. This 1-hour and 6-minute presentation equips you with the knowledge to begin your own journey in chasing these formidable EFI monsters.