> Has there ever been a non-theoretical use of microcode in malware? Not to my knowledge. Indeed, the difficulty involved as well as proprietary nature of the

> Has there ever been a non-theoretical use of microcode in malware? Not to my knowledge. Indeed, the difficulty involved as well as proprietary nature of the format seems to indicate such an attack vector would be restricted to only the most sophisticated actors. So, it's no wonder that there are no real-world examples, assuming that they even exist in the first place. > Also, microcode updates aren't retained when the system is powered, ... While true, I don't necessarily see this as a fatal blow to the attack vector's utility. Without delving into raw speculation, I'm sure there's plenty of clever ways to craft attacks unique to what microcode affords. That said, it seems likely that microcode attacks would be treated more as a specialized capability augmenting something like what the article outlines, rather than a method of attack unto itself.