Bootkitty: The Linux Bootkit Giving Windows-Only Hackers a Run for Their Money!
Meet Bootkitty, the first UEFI bootkit designed for Linux systems. Created by BlackCat, this proof-of-concept bootkit aims to bypass kernel signature verification. While not yet seen in the wild, it signals a shift in cyber threats, proving UEFI bootkits aren’t just a Windows exclusive club anymore.
Hot Take:
Linux users, you thought you were safe from bootkits? Well, think again! Bootkitty is here to claw its way into your systems, proving that no operating system is safe from the purr-sistent advances of cyber mischief-makers. Who knew cats could be so interested in boots? Maybe they just want to play with the laces.
Key Points:
- First UEFI bootkit for Linux, named Bootkitty, is a proof-of-concept.
- Bootkitty disables kernel’s signature verification and loads unknown ELF binaries.
- The bootkit is ineffective on systems with UEFI Secure Boot enabled unless compromised.
- Discovery includes an unsigned kernel module capable of deploying further unknown modules.
- No evidence links Bootkitty to the ALPHV/BlackCat ransomware group.
Already a member? Log in here