#bootkitty — Public Fediverse posts

Sehr interessanter Podcast zu Bootkitty!

Er fast die Geschehnisse um die Entdeckung des ersten UEFI-Boot-Kits für Linux sehr gut und anschaulich zusammen. Habe viel durch den Podcast gelernt.

Vielen Dank an @syt und @christopherkunz für diese tolle Folge von Passwort.

#linux #security #bootkit #bootkitty

https://passwort.podigee.io/23-bootkitty-schnitzeljagd-um-ein-linux-bootkit

Investigating the #BootKitty #Linux #Malware… #sog #yt

https://youtu.be/tbpsPsygEM8

Investigating the #BootKitty #Linux #Malware… #sog #yt

https://youtu.be/tbpsPsygEM8

Einige Erläuterungen zu #Bootkitty von Binarly. Ganz interessant. Ich hatte mir damals #LogoFAIL nicht angesehen. Ist schon bisschen peinlich, wenn in einem Bilddekoder die Längenprüfung fehlt.

#BIOS #UEFI #Linux #Infosec
https://www.binarly.io/blog/logofail-exploited-to-deploy-bootkitty-the-first-uefi-bootkit-for-linux

Einige Erläuterungen zu #Bootkitty von Binarly. Ganz interessant. Ich hatte mir damals #LogoFAIL nicht angesehen. Ist schon bisschen peinlich, wenn in einem Bilddekoder die Längenprüfung fehlt.

#BIOS #UEFI #Linux #Infosec
https://www.binarly.io/blog/logofail-exploited-to-deploy-bootkitty-the-first-uefi-bootkit-for-linux

Researchers Discover "Bootkitty" – First UEFI Bootkit Targeting Linux Kernels
https://thehackernews.com/2024/11/researchers-discover-bootkitty-first.html #Cybercrime #Linux #UefiBootkit #Bootkit #Bootkitty

Researchers Discover "Bootkitty" – First UEFI Bootkit Targeting Linux Kernels
https://thehackernews.com/2024/11/researchers-discover-bootkitty-first.html #Cybercrime #Linux #UefiBootkit #Bootkit #Bootkitty

#UEFIBootkit "#Bootkitty" für #Linux :tux: ist offenbar Uni-Projekt aus Südkorea | Security https://www.heise.de/news/Bootkitty-Prototyp-eines-Linux-UEFI-Rootkits-ist-koreanisches-Uni-Projekt-10182420.html #SecureBoot #UEFI #Malware #Ransomware

#UEFIBootkit "#Bootkitty" für #Linux :tux: ist offenbar Uni-Projekt aus Südkorea | Security https://www.heise.de/news/Bootkitty-Prototyp-eines-Linux-UEFI-Rootkits-ist-koreanisches-Uni-Projekt-10182420.html #SecureBoot #UEFI #Malware #Ransomware

#Bootkitty : Analyzing the first #UEFI bootkit for #Linux

« ESET researchers analyze the first UEFI bootkit designed for Linux systems » by Martin Smolár and Peter Strýček

› https://www.welivesecurity.com/en/eset-research/bootkitty-analyzing-first-uefi-bootkit-linux/

#InfoSec #bootkit #SecureBoot

#Bootkitty : Analyzing the first #UEFI bootkit for #Linux

« ESET researchers analyze the first UEFI bootkit designed for Linux systems » by Martin Smolár and Peter Strýček

› https://www.welivesecurity.com/en/eset-research/bootkitty-analyzing-first-uefi-bootkit-linux/

#InfoSec #bootkit #SecureBoot

BootKitty Linux UEFI bootkit spotted exploiting LogoFAIL flaws – Source: securityaffairs.com https://ciso2ciso.com/bootkitty-linux-uefi-bootkit-spotted-exploiting-logofail-flaws-source-securityaffairs-com/ #rssfeedpostgeneratorecho #informationsecuritynews #ITInformationSecurity #SecurityAffairscom #CyberSecurityNews #PierluigiPaganini #SecurityAffairs #SecurityAffairs #BreakingNews #SecurityNews #hackingnews #'LogoFAIL' #Bootkitty #Security #Bootkit #hacking #Malware #LINUX

BootKitty Linux UEFI bootkit spotted exploiting LogoFAIL flaws – Source: securityaffairs.com https://ciso2ciso.com/bootkitty-linux-uefi-bootkit-spotted-exploiting-logofail-flaws-source-securityaffairs-com/ #rssfeedpostgeneratorecho #informationsecuritynews #ITInformationSecurity #SecurityAffairscom #CyberSecurityNews #PierluigiPaganini #SecurityAffairs #SecurityAffairs #BreakingNews #SecurityNews #hackingnews #'LogoFAIL' #Bootkitty #Security #Bootkit #hacking #Malware #LINUX

Prototype UEFI Bootkit is South Korean University Project; LogoFAIL Exploit Discovered – Source: www.securityweek.com https://ciso2ciso.com/prototype-uefi-bootkit-is-south-korean-university-project-logofail-exploit-discovered-source-www-securityweek-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #Malware&Threats #vulnerabilities #securityweekcom #securityweek #SouthKorea #Bootkitty #FEATURED #Binarly #Bootkit #eset #UEFI

Prototype UEFI Bootkit is South Korean University Project; LogoFAIL Exploit Discovered – Source: www.securityweek.com https://ciso2ciso.com/prototype-uefi-bootkit-is-south-korean-university-project-logofail-exploit-discovered-source-www-securityweek-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #Malware&Threats #vulnerabilities #securityweekcom #securityweek #SouthKorea #Bootkitty #FEATURED #Binarly #Bootkit #eset #UEFI

‘Bootkitty’ First Bootloader to Take Aim at Linux – Source: www.darkreading.com https://ciso2ciso.com/bootkitty-first-bootloader-to-take-aim-at-linux-source-www-darkreading-com/ #rssfeedpostgeneratorecho #DarkReadingSecurity #CyberSecurityNews #DARKReading #Bootkitty

‘Bootkitty’ First Bootloader to Take Aim at Linux – Source: www.darkreading.com https://ciso2ciso.com/bootkitty-first-bootloader-to-take-aim-at-linux-source-www-darkreading-com/ #rssfeedpostgeneratorecho #DarkReadingSecurity #CyberSecurityNews #DARKReading #Bootkitty

Prototype UEFI Bootkit is South Korean University Project; LogoFAIL Exploit Discovered https://www.securityweek.com/prototype-uefi-bootkit-is-south-korean-university-project-logofail-exploit-discovered/ #Malware&Threats #Vulnerabilities #SouthKorea #Bootkitty #Binarly #bootkit #ESET #UEFI

Prototype UEFI Bootkit is South Korean University Project; LogoFAIL Exploit Discovered https://www.securityweek.com/prototype-uefi-bootkit-is-south-korean-university-project-logofail-exploit-discovered/ #Malware&Threats #Vulnerabilities #SouthKorea #Bootkitty #Binarly #bootkit #ESET #UEFI

Prototype UEFI Bootkit is South Korean University Project; LogoFAIL Exploit Discovered https://www.securityweek.com/prototype-uefi-bootkit-is-south-korean-university-project-logofail-exploit-discovered/ #Malware&Threats #Vulnerabilities #SouthKorea #Bootkitty #Binarly #bootkit #ESET #UEFI

Prototype UEFI Bootkit is South Korean University Project; LogoFAIL Exploit Discovered https://www.securityweek.com/prototype-uefi-bootkit-is-south-korean-university-project-logofail-exploit-discovered/ #Malware&Threats #Vulnerabilities #SouthKorea #Bootkitty #Binarly #bootkit #ESET #UEFI

Security Week 2449: «тренировочный» буткит для Linux

На прошлой неделе компания ESET сообщила об обнаружении буткита, конечной целью которого является атака систем на базе Linux. Задача любого буткита — выполнить вредоносный код до загрузки ядра системы. Это в теории обеспечивает широкие возможности контроля над атакуемым компьютером и затрудняет обнаружение вредоносного ПО. Закрепление буткита в прошивке UEFI также позволяет пережить полную переустановку ОС или замену жесткого диска. На практике реализовать подобную атаку достаточно сложно: известны лишь три примера реальных буткитов, закрепляющихся в UEFI. Из них только самый свежий, известный как BlackLotus , способен обойти систему Secure Boot, направленную как раз на блокировку выполнения «неавторизованного» кода на начальном этапе загрузки. Как и следовало ожидать, целью всех реальных буткитов является атака на ОС Windows. Именно поэтому Linux-буткит мог бы представлять особый интерес. Впрочем, в данном случае, как позднее выяснилось, речь не идет о реальном вредоносном ПО — это был учебный Proof of Concept, разработанный в рамках учебной программы по кибербезопасности в Южной Корее.разработанный корейскими студентами.

https://habr.com/ru/companies/kaspersky/articles/863078/

#bootkit #bootkitty

#Bootkitty: Forscher entdecken erstes #UEFIBootkit für #Linux :tux: - Golem.de https://www.golem.de/news/bootkitty-forscher-entdecken-erstes-uefi-bootkit-fuer-linux-2411-191230.html #Malware #Bootkit #UEFI

#Bootkitty: Forscher entdecken erstes #UEFIBootkit für #Linux :tux: - Golem.de https://www.golem.de/news/bootkitty-forscher-entdecken-erstes-uefi-bootkit-fuer-linux-2411-191230.html #Malware #Bootkit #UEFI

Bootkitty: Forscher entdecken erstes Uefi-Bootkit für Linux - Golem.de
https://www.golem.de/news/bootkitty-forscher-entdecken-erstes-uefi-bootkit-fuer-linux-2411-191230.html #Cybercrime #Linux #UefiBootkit #Bootkit #Bootkitty

Bootkitty: Forscher entdecken erstes Uefi-Bootkit für Linux - Golem.de
https://www.golem.de/news/bootkitty-forscher-entdecken-erstes-uefi-bootkit-fuer-linux-2411-191230.html #Cybercrime #Linux #UefiBootkit #Bootkit #Bootkitty

It’s only a real linux bootkit if it comes under an open-source license.

BTW it’s actually GNU/Bootkitty.

#rootkit #bootkit #bootkitty #shitpost #fuckthoseguys

Code found online #exploits #LogoFAIL to install #Bootkitty #Linux #backdoor
#security

https://arstechnica.com/security/2024/11/code-found-online-exploits-logofail-to-install-bootkitty-linux-backdoor/

Code found online #exploits #LogoFAIL to install #Bootkitty #Linux #backdoor
#security

https://arstechnica.com/security/2024/11/code-found-online-exploits-logofail-to-install-bootkitty-linux-backdoor/

Code found online exploits LogoFAIL to install Bootkitty Linux backdoor - Researchers have discovered malicious code circulating in the wild that hi... - https://arstechnica.com/security/2024/11/code-found-online-exploits-logofail-to-install-bootkitty-linux-backdoor/ #unifiedextensiblefirmwareinterface #bootkitty #security #logofail #biz⁢ #linux #uefi

Code found online exploits LogoFAIL to install Bootkitty Linux backdoor - Researchers have discovered malicious code circulating in the wild that hi... - https://arstechnica.com/security/2024/11/code-found-online-exploits-logofail-to-install-bootkitty-linux-backdoor/ #unifiedextensiblefirmwareinterface #bootkitty #security #logofail #biz⁢ #linux #uefi

Linux in opmars en kan zich eindelijk meten met Windows en Apple. Eerste virus gevonden gericht op Linux UEFI boot.

https://datanews.knack.be/nieuws/security/onderzoekers-vinden-eerste-uefi-bootkit-voor-linux/

#Bootkitty #virus #malware #Linux #bootkit #uefi #eset #virustotal #masterbootrecord #morpurgoMedia

Researchers have identified “Bootkitty,” the first known UEFI bootkit developed to target Linux systems. #cybersecurity #linux #bootkitty #ESET #malware #bootkits

https://buff.ly/4eTjEHi

Researchers have identified “Bootkitty,” the first known UEFI bootkit developed to target Linux systems. #cybersecurity #linux #bootkitty #ESET #malware #bootkits

https://buff.ly/4eTjEHi

#Bootkitty Analyzing the first #UEFI #bootkit for #Linux https://www.welivesecurity.com/en/eset-research/bootkitty-analyzing-first-uefi-bootkit-linux/

#Bootkitty Analyzing the first #UEFI #bootkit for #Linux https://www.welivesecurity.com/en/eset-research/bootkitty-analyzing-first-uefi-bootkit-linux/

Researchers at security firm #ESET said Wednesday that #Bootkitty -- the name unknown threat actors gave to their #Linux bootkit -- was uploaded to #VirusTotal earlier this month. The World's First Unkillable #UEFI Bootkit For Linux https://arstechnica.com/security/2024/11/found-in-the-wild-the-worlds-first-unkillable-uefi-bootkit-for-linux/

Researchers at security firm #ESET said Wednesday that #Bootkitty -- the name unknown threat actors gave to their #Linux bootkit -- was uploaded to #VirusTotal earlier this month. The World's First Unkillable #UEFI Bootkit For Linux https://arstechnica.com/security/2024/11/found-in-the-wild-the-worlds-first-unkillable-uefi-bootkit-for-linux/

Linux in opmars en kan zich eindelijk meten met Windows en Apple. Eerste virus gevonden gericht op Linux UEFI boot.

https://datanews.knack.be/nieuws/security/onderzoekers-vinden-eerste-uefi-bootkit-voor-linux/

#Bootkitty #virus #malware #Linux #bootkit #uefi #eset #virustotal #masterbootrecord #morpurgoMedia

ESET Flags Prototype UEFI Bootkit Targeting Linux – Source: www.securityweek.com https://ciso2ciso.com/eset-flags-prototype-uefi-bootkit-targeting-linux-source-www-securityweek-com/ #rssfeedpostgeneratorecho #SupplyChainSecurity #CyberSecurityNews #vulnerabilities #securityweekcom #securityweek #UEFIbootkit #BlackLotus #Bootkitty #eset #UEFI

ESET Flags Prototype UEFI Bootkit Targeting Linux – Source: www.securityweek.com https://ciso2ciso.com/eset-flags-prototype-uefi-bootkit-targeting-linux-source-www-securityweek-com/ #rssfeedpostgeneratorecho #SupplyChainSecurity #CyberSecurityNews #vulnerabilities #securityweekcom #securityweek #UEFIbootkit #BlackLotus #Bootkitty #eset #UEFI

Bootkitty is the first UEFI Bootkit designed for Linux systems – Source: securityaffairs.com https://ciso2ciso.com/bootkitty-is-the-first-uefi-bootkit-designed-for-linux-systems-source-securityaffairs-com/ #rssfeedpostgeneratorecho #informationsecuritynews #ITInformationSecurity #SecurityAffairscom #CyberSecurityNews #PierluigiPaganini #SecurityAffairs #SecurityAffairs #BreakingNews #SecurityNews #hackingnews #Bootkitty #Bootkit #hacking #Malware #LINUX #UEFI

Bootkitty is the first UEFI Bootkit designed for Linux systems – Source: securityaffairs.com https://ciso2ciso.com/bootkitty-is-the-first-uefi-bootkit-designed-for-linux-systems-source-securityaffairs-com/ #rssfeedpostgeneratorecho #informationsecuritynews #ITInformationSecurity #SecurityAffairscom #CyberSecurityNews #PierluigiPaganini #SecurityAffairs #SecurityAffairs #BreakingNews #SecurityNews #hackingnews #Bootkitty #Bootkit #hacking #Malware #LINUX #UEFI

Researchers discover first UEFI bootkit malware for Linux
https://www.bleepingcomputer.com/news/security/researchers-discover-bootkitty-first-uefi-bootkit-malware-for-linux/
#ycombinator #computers #windows #linux #mac #support #tech_support #spyware #malware #virus #security #Bootkit #Bootkitty #Kernel #Linux #Ubuntu #UEFI #virus_removal #malware_removal #computer_help #technical_support

Researchers discover first UEFI bootkit malware for Linux
https://www.bleepingcomputer.com/news/security/researchers-discover-bootkitty-first-uefi-bootkit-malware-for-linux/
#ycombinator #computers #windows #linux #mac #support #tech_support #spyware #malware #virus #security #Bootkit #Bootkitty #Kernel #Linux #Ubuntu #UEFI #virus_removal #malware_removal #computer_help #technical_support

A rootkit is a piece of malware that runs in the deepest regions of the operating system it infects.
It leverages this strategic position to hide information about its presence from the operating system itself.
A bootkit, meanwhile, is malware that infects the boot-up process in much the same way.
Bootkits for the UEFI
—short for Unified Extensible Firmware Interface
—lurk in the chip-resident firmware that runs each time a machine boots.
These sorts of bootkits can persist indefinitely, providing a stealthy means for backdooring the operating system even before it has fully loaded and enabled security defenses such as antivirus software.
The newly discovered #Bootkitty suggests threat actors may be actively developing a Linux version of the same sort of unkillable bootkit that previously was found only targeting Windows machines.
“Whether a proof of concept or not, Bootkitty marks an interesting move forward in the UEFI threat landscape,
breaking the belief about modern UEFI bootkits being Windows-exclusive threats,” ESET researchers wrote.
“Even though the current version from VirusTotal does not, at the moment, represent a real threat to the majority of Linux systems,
it emphasizes the necessity of being prepared for potential future threats.”

https://arstechnica.com/security/2024/11/found-in-the-wild-the-worlds-first-unkillable-uefi-bootkit-for-linux/

A rootkit is a piece of malware that runs in the deepest regions of the operating system it infects.
It leverages this strategic position to hide information about its presence from the operating system itself.
A bootkit, meanwhile, is malware that infects the boot-up process in much the same way.
Bootkits for the UEFI
—short for Unified Extensible Firmware Interface
—lurk in the chip-resident firmware that runs each time a machine boots.
These sorts of bootkits can persist indefinitely, providing a stealthy means for backdooring the operating system even before it has fully loaded and enabled security defenses such as antivirus software.
The newly discovered #Bootkitty suggests threat actors may be actively developing a Linux version of the same sort of unkillable bootkit that previously was found only targeting Windows machines.
“Whether a proof of concept or not, Bootkitty marks an interesting move forward in the UEFI threat landscape,
breaking the belief about modern UEFI bootkits being Windows-exclusive threats,” ESET researchers wrote.
“Even though the current version from VirusTotal does not, at the moment, represent a real threat to the majority of Linux systems,
it emphasizes the necessity of being prepared for potential future threats.”

https://arstechnica.com/security/2024/11/found-in-the-wild-the-worlds-first-unkillable-uefi-bootkit-for-linux/

ESET Flags Prototype UEFI Bootkit Targeting Linux https://www.securityweek.com/eset-flags-prototype-uefi-bootkit-targeting-linux/ #SupplyChainSecurity #Vulnerabilities #UEFIbootkit #BlackLotus #Bootkitty #ESET #UEFI

ESET Flags Prototype UEFI Bootkit Targeting Linux https://www.securityweek.com/eset-flags-prototype-uefi-bootkit-targeting-linux/ #SupplyChainSecurity #Vulnerabilities #UEFIbootkit #BlackLotus #Bootkitty #ESET #UEFI

Also, wenn ein Bootkit / Rootkit für UEFI / Linux entwickelt wurde, dann war 2024 das Jahr von #Linux auf dem #Desktop.

#UEFI #Bootkitty