ROCKBOOT — Malware Profile

ROCKBOOT is a Bootkit that has been used by an unidentified, suspected China-based group.

MITRE ATT&CK techniques (1)

• T1542.003 Bootkit

Attributed threat actors

• APT41

Read the full analysis on IntelFusions