Option ROM attacks can be used as part of aninitial infection or to spread malicious firmware from one componentto another. Option ROM is normally used by components to obtain theappropriate firmware during the boot process. Compromising the Option ROM firmware to offer an initial method of infection to provide a persistentmodification of the boot process without directly modifying the systemUEFI firmware.