World’s 1st unkillable UEFI bootkit for Linux

Found in the wild: The world’s first unkillable UEFI bootkit for Linux
By infecting the firmware that runs immediately before the operating system loads, these UEFI bootkits continue to run even when the hard drive is replaced or reformatted. Now the same type of chip-dwelling malware has been found in the wild for backdooring Linux machines.
First-ever UEFI bootkit for Linux in the works, experts say
Security researchers say they've stumbled upon the first-ever UEFI bootkit targeting Linux, illustrating a key moment in the evolution of such tools. Dubbed "Bootkitty" by Slovak security shop ESET, the first sample of the bootkit was detected on malware encyclopedia VirusTotal earlier this month.
ESET Flags Prototype UEFI Bootkit Targeting Linux
ESET researchers have uncovered a prototype UEFI bootkit targeting Ubuntu Linux, marking an expansion of bootkit attacks beyond Windows.
Researchers discover first UEFI bootkit malware for Linux
The first UEFI bootkit specifically targeting Linux systems has been discovered, marking a shift in stealthy and hard-to-remove bootkit threats that previously focused on Windows.
'Bootkitty' Malware Can Infect a Linux Machine's Boot Process
This appears to be the first UEFI bootkit that goes beyond Windows and targets Linux machines, according to ESET security researchers.
Bootkitty marks a new chapter in the evolution of UEFI threats
ESET researchers have made a discovery that may signal a shift on the UEFI threat landscape and underscores the need for vigilance against future threats
New Bootkit “Bootkitty” Targets Linux Systems via UEFI
Cybersecurity researchers have discovered “Bootkitty,” possibly the first UEFI bootkit specifically designed to target Linux systems. This marks a significant shift in the UEFI threat landscape, which previously focused exclusively on Windows-based attacks.
Researchers Discover "Bootkitty" – First UEFI Bootkit Targeting Linux Kernels
Dubbed Bootkitty by its creators who go by the name BlackCat, the bootkit is assessed to be a proof-of-concept (PoC) and there is no evidence that it has been put to use in real-world attacks. Also tracked as IranuKit, it was uploaded to the VirusTotal platform on November 5, 2024.
Bootkitty: Analyzing the first UEFI bootkit for Linux
ESET's discovery of the first UEFI bootkit designed for Linux sendss an important message: UEFI bootkits are no longer confined to Windows systems alone.
Hackaday2y
What’s The Deal With UEFI?
It seems like there are two camps, the small group of people who care about UEFI and everyone else who doesn’t really notice or care as long as their computer works. So let’s talk about what ...
Hosted on MSN4mon
What is UEFI, and how it is different from a normal BIOS?
BIOS and UEFI differ in age, interface, and functionality, with UEFI supporting mouse navigation and networking. BIOS uses MBR, UEFI uses GPT, and BIOS works in 16-bit mode while UEFI can ...