Skip to content
MalwareWiki

Malware

MoonBounce

MoonBounce is a malware embedded into a modified UEFI firmware.

MoonBounce is a Windows malware family operated by APT41.

Background

MoonBounce is malware implanted in tampered UEFI firmware. Because it resides in SPI flash, it survives a complete reinstall and even disk swaps. With a minimal footprint, MoonBounce stages and delivers user-mode malware entirely in memory.

Source: Malpedia (Fraunhofer FKIE).