The vulnerability found was an RCE, and apparently at least 5% of their devices are infected. > The pivot from patch to total replacement of affected devices

The vulnerability found was an RCE, and apparently at least 5% of their devices are infected. > The pivot from patch to total replacement of affected devices is fairly > stunning and implies the malware the threat actors deployed somehow achieves > persistence at a low enough level that even wiping the device wouldn’t > eradicate attacker access. Very interesting. I'd like to think it's probably some technical limitations in the recovery options rather than some weird magickery to persist beyond drive reset. Because, if it's not, everyone is screwed.