EFI rootkit for Macs demonstrated

At the Black Hat hacker conference, Australian security expert Loukas K (aka Snare) has demonstratedPDF a rootkit which is able to insert itself into a Macbook Air’s EFI firmware and bypass the FileVault hard drive encryption system. Although the idea of an EFI rootkit is nothing new, this is the first time it has been demonstrated live and the hacker has used a previously unknown method based on a modified Thunderbolt to Ethernet adapter.