Need Advice On Using Malware Infested Pc

My company is in the middle of an expansion and a total overhaul. There are changes every day. We are planning to implement this quality management software in our production unit. We need new PCs to the unit for this and we are planning to buy some and use some of the existing ones. Most of the available ones are probably infested with malware. We are going to do a fresh install of windows on all these PCs. But I am confused about something. I remember reading about malware that can affect BIOS. Is that a thing? If yes what can we do about it?

 

Bios rootkits (bootkits) are a potential threat but quite rare, although their usage is advanced, they are on the rise due to their ability to remain stealth as they run before the OS is loaded, and are usually FUD by AV's.

If you think these may be a concern for your existing devices, you could flash the bios of these systems with the latest firmware updates before a fresh install of the OS.

The Chipsec platform is a tool that can be used to verify the UEFI integrity of your systems bios.
Its source code is available on GitHub.
https://www.scmagazineuk.com/intel-...alware-updates-detection-tool/article/643799/