Found in the wild: The world’s first unkillable UEFI bootkit for Linux
By infecting the firmware that runs immediately before the operating system loads, these UEFI bootkits continue to run even when the hard drive is replaced or reformatted. Now the same type of chip-dwelling malware has been found in the wild for backdooring Linux machines.
Researchers Discover "Bootkitty" – First UEFI Bootkit Targeting Linux Kernels
Dubbed Bootkitty by its creators who go by the name BlackCat, the bootkit is assessed to be a proof-of-concept (PoC) and there is no evidence that it has been put to use in real-world attacks. Also tracked as IranuKit, it was uploaded to the VirusTotal platform on November 5, 2024.
'Bootkitty' Malware Can Infect a Linux Machine's Boot Process
This appears to be the first UEFI bootkit that goes beyond Windows and targets Linux machines, according to ESET security researchers.
First-ever UEFI bootkit for Linux in the works, experts say
Bootkitty doesn’t bite… yet Security researchers say they've stumbled upon the first-ever UEFI bootkit targeting Linux, illustrating a key moment in the evolution of such tools.… Dubbed "Bootkitty" by Slovak security shop ESET,
Bootkitty: Analyzing the first UEFI bootkit for Linux
ESET's discovery of the first UEFI bootkit designed for Linux sendss an important message: UEFI bootkits are no longer confined to Windows systems alone.
Hackaday2y
What’s The Deal With UEFI?
UEFI stands for Unified Extensible Firmware Interface, a standard held by an organization known as the United EFI Forum. Intel came out with EFI (Extensible Firmware Interface) and later ...
Engineering360 News6y
Beyond BIOS Implementing the Unified Extensible Firmware Interface with Intel's Framework
No part of this publication may be reproduced, stored in a retrieval system or transmitted in any form or by any means, electronic, mechanical, photocopying, recording, scanning or otherwise, except ...
Computing2y
CosmicStrand UEFI rootkit found on ASUS and Gigabyte motherboards
Researchers from Kaspersky have discovered a new kind of powerful Unified Extensible Firmware Interface (UEFI) firmware rootkit known as CosmicStrand, which they attribute to an unidentified ...
TWCN Tech News2y
What Is EFI? How to identify EFI System Partitions on Windows 11?
EFI stands for Extensible Firmware Interface system ... or SSDs used by a computer system that has the UEFI (Unified Extensible Firmware Interface). When you boot your computer, the UEFI ...