Apparently it's "just" a trojan on the flash filesystem, not really in the firmware itself, and only on motherboards coming from the service depot.

Sounds like someone in the service department working on reloading data onto the motherboards got a trojan that infected the image he created.