ESET researchers have uncovered the first UEFI bootkit designed specifically for Linux systems. The discovery of the bootkit – which has been named Bootkitty by its creators – signals a shift on the UEFI threat landscape. While Bootkitty is only thought to be a proof of concept and has not been deployed in actual attacks, its discovery shows that UEFI bootkits are no longer the preserve of Windows systems.
What else should you know about Bootkitty and, indeed, what is UEFI and how could attackers subvert this interface between the firmware and the operating system for their own ends? Hear from ESET Chief Security Evangelist Tony Anscombe and make sure to read the full blogpost detailing Bootkitty.