Found on VirusTotal: The world’s first UEFI bootkit for Linux
arstechnica.com
“Bootkitty” is likely a proof-of-concept, but may portend working UEFI malware for Linux.

“Whether a proof of concept or not, Bootkitty marks an interesting move forward in the UEFI threat landscape, breaking the belief about modern UEFI bootkits being Windows-exclusive threats,” ESET researchers wrote. “Even though the current version from VirusTotal does not, at the moment, represent a real threat to the majority of Linux systems, it emphasizes the necessity of being prepared for potential future threats.”

  • TheFogan@programming.devEnglish
    5·
    30 days ago

    Never mind the fact that basically every big Linux distro plays nicely with secure boot these days, and has for a while now.

    In my experience nicely is still pretty relative. It still seems to be the most common area things go wrong on my installs and place I have the hardest time working around…

    and the bigger part, it’s a solution to a problem that I’ve never seen happen in the wild, and really can’t fathom happening on linux that doesn’t involve a very dumb user running software from an unknown source as root.