A security software firm has revealed that spyware has been hidden within the firmware of hard drives.