Found in the wild: The world’s first unkillable UEFI bootkit for Linux

“Bootkitty” is likely a proof-of-concept, but may portend working UEFI malware for Linux.

7 comments

found in the wild no evidence of actual infections in the wild

you know I shouldn't be disappointed by blatant lies in headlines with the state of journalism in current year but I still kinda am.
- Thanks for saving my time.
- You can find it in the wild without finding evidence of infection.
  
  I think in this context found in the wild means that the sample was found in the wild, just maybe not running.
- I'm disappointed, but this is a good thing.
- You are disappointed because it doesn't have to be this way.
So, they are talking about a bootkit embedding itself into the uefi firmware, then the graphics show a malicious bootloader that resides in the EFI partition that can be removed by formatting.
imagine using uefi or bios at all

coreboot+grub2 superiority

7 comments