Reply to thread

Message

<blockquote data-quote="bazang" data-source="post: 1109647" data-attributes="member: 114717">“Bootkitty” is likely a proof-of-concept, but may portend working UEFI malware for Linux.As ESET notes, the discovery is nonetheless significant because it demonstrates someone—most likely a malicious threat actor—is pouring resources and considerable know-how into creating working UEFI bootkits for Linux.That threat actor is no doubt working on various ways to circumvent UEFI Secure Boot. Various general methods already exist. More refined methods specific to this class of UEFI bootkits will be a checkmate move. With such a UEFI bootkit Linux security will be grievously compromised. The operating system ecosystem will have to scramble to stay ahead of the threat. It is predicted that the threat actor shall target the biggest users of Linux - academic and governmental research institutions and then the global web services industry.Lots of Linux users are even more unsafe than Windows users because they believe &quot;We are secure because we use Linux. There are much less vulnerabilities and threats in the Linux world.&quot; No. Just, No.</blockquote>

[QUOTE="bazang, post: 1109647, member: 114717"] “Bootkitty” is likely a proof-of-concept, but may portend working UEFI malware for Linux. [B]As ESET notes, the discovery is nonetheless significant because it demonstrates someone—most likely a malicious threat actor—is pouring resources and considerable know-how into creating working UEFI bootkits for Linux.[/B] That threat actor is no doubt working on various ways to circumvent UEFI Secure Boot. Various general methods already exist. More refined methods specific to this class of UEFI bootkits will be a checkmate move. With such a UEFI bootkit Linux security will be grievously compromised. The operating system ecosystem will have to scramble to stay ahead of the threat. It is predicted that the threat actor shall target the biggest users of Linux - academic and governmental research institutions and then the global web services industry. Lots of Linux users are even more unsafe than Windows users because they believe "We are secure because we use Linux. There are much less vulnerabilities and threats in the Linux world." No. Just, No. [/QUOTE]

Verification