BlackX bootkit installer inst.exe from ProgramData Intel with encrypted file and

ills3c Intel&Coffee@Ills3C

•updated 4 days ago•0•0•2

Detects instances where inst.exe running from C:\ProgramData\Intel with specific command-line arguments (extensionless and key-like) subsequently writes files to the EFI system partition or boot paths on the same device.