Or rather a "forgotten" class of attack, because at one point they included AV in the bios to cut out this type of problem.

And the lesson is......don't ignore Windows security updates.