https://www.fireeye.com/blog/threat-research/2015/12/fin1-targets-boot-record.html