"The engine, which resides in the computer's BIOS, replaces a core Windows system file with its own, allowing files to be downloaded once the device is connected to the internet."

https://www.zdnet.com/article/lenovo-rootkit-ensured-its-sof...