Found in the wild: The world’s first unkillable UEFI bootkit for Linux
https://arstechnica.com/security/2024/11/found-in-the-wild-the-worlds-first-unkillable-uefi-bootkit-for-linux/Open linkView original on programming.devSyndicated from the fediverse. Read and engage on the original instance.
View original on programming.devhttps://arstechnica.com/security/2024/11/found-in-the-wild-the-worlds-first-unkillable-uefi-bootkit-for-linux/Open linkView original on programming.dev
7 replies
you know I shouldn't be disappointed by blatant lies in headlines with the state of journalism in current year but I still kinda am.
Thanks for saving my time.
You are disappointed because it doesn't have to be this way.
You can find it in the wild without finding evidence of infection.
I think in this context found in the wild means that the sample was found in the wild, just maybe not running.
I'm disappointed, but this is a good thing.
So, they are talking about a bootkit embedding itself into the uefi firmware, then the graphics show a malicious bootloader that resides in the EFI partition that can be removed by formatting.
imagine using uefi or bios at all
coreboot+grub2 superiority