coldbraid

Pre-OS Boot T1542

Adversaries may abuse Pre-OS Boot mechanisms as a way to establish persistence on a system. During the booting process of a computer, firmware and various startup services are loaded before the operating system. These programs control flow of execution before the operating system takes control.…

Tactics
Stealth, Persistence
Actors using it
4
Sub-techniques
1

Ransomware groups reported using it

safepayMajinahanashi

Threat actors

MITRE ATT&CKTechnique matrix