When I'm x64: Bootkit Threat Evolution in 2011. Authors: Harley, Matrosov, Rodionov

First predicted in 2010, TDL4 (Win32/Olmarik) has been evolving since 2011. Its developers attempted to bypass the KB2506014 security update, which addressed a vulnerability allowing abuse of WinPE mode.