ManMemories on Nostr: Spyware can deeply embed itself in a device’s bootloader and firmware. A ...

Spyware can deeply embed itself in a device’s bootloader and firmware. A compromised bootloader allows the spyware to persist even after reflashing, which typically reinstalls the OS but leaves the bootloader intact. Antivirus software, factory resets, and standard firmware reinstallations often fail to eliminate the spyware, as these actions usually affect only surface-level user data and applications.

quoting note13jx…4dt9

#GrapheneOS supports full verified boot, making it difficult for spyware to persist. It would make sense for spy tools to prevent device from getting security updates and reboot. I wouldn't be surprised if tools like Pegasus simulate device reboot without actual rebooting to stay in memory as long as possible.