Multiple news sites have articles on a form of malware which has bootkit functionality, and persists on the boot sector.
http://arstechnica.com/security/2015/12/nemesis-malware-hijacks-pcs-boot-process-to-gain-stealth-persistence/
http://www.eweek.com/security/bootrash-uses-volume-boot-record-to-exploit-financial-services.html
