Security researchers at antivirus provider ESET have discovered a bootkit developed for Linux Ubuntu machines. Known as Bootkitty, this malware is capable of infecting a Linux computer’s boot process before the operating system loads, making it more challenging to detect and remove. However, Bootkitty appears to be proof-of-concept and is not seen as a significant threat due to its limitations. Its existence highlights that Linux systems are potentially susceptible to UEFI bootkits, previously only observed in Windows systems.
Researchers discover first UEFI bootkit malware for Linux
Named “Bootkitty”, the first UEFI bootkit targeting Linux systems has been detected by ESET researchers. Operating before the system’s boot process begins enables Bootkitty to