BootkittyMalware
Last reported 3 months ago, by ESET WeLiveSecurity (ES)2 reports
ATT&CK techniques
1 technique · each with the sentence it comes from- T1542.003Bootkit
“…os pueden explotarse para ejecutar código no confiable durante el arranque del sistema, lo que permite a los atacantes desplegar bootkits UEFI maliciosos (como Bootkitty, HybridPetya o BlackLotus) incluso en sistemas con UEFI Secure Boot habilitado.”
Reports per month
last 12 monthsOctober so far (hatched). Counted by report, not by story.
What the reports say
2 reports, newest first · the exact sentence from each-
Los UEFI shims olvidados socavan Secure Boot“…ar código no confiable durante el arranque del sistema, lo que permite a los atacantes desplegar bootkits UEFI maliciosos (como Bootkitty, HybridPetya o BlackLotus) incluso en sistemas con UEFI Secure Boot habilitado.”
-
Forgotten UEFI shims undermining Secure Boot“…ted shims can be exploited to execute untrusted code during system boot, enabling attackers to deploy malicious UEFI bootkits (such as Bootkitty, HybridPetya, or BlackLotus) even on systems with UEFI Secure Boot enabled.”
Indicators in its reports
named in the reports above- ae75f0d82ba3df82…8bfd83a6b961in 2 reports
- 7b2a3f5c96f95bd8…215c8de9eb10in 2 reports
- eb86fa1386fe6e45…34a161018a0ain 2 reports
- fd23d6e57de6f4e1…3447268d50c5in 2 reports
- a0de9333442c1bf9…21bf6c1ae3e4in 2 reports
- 95b6d71fc0c0f8c5…a6759ce5fc06in 2 reports
- 236a9cb0d71951c3…5d9de549e19bin 2 reports
- 5e594c448760a313…a77f284fa63bin 2 reports
- 8a964d5f8373948d…b53d98ae8963in 2 reports
- 410260b1b6f5af5f…437f312db373in 2 reports
- 96275dfd6282a522…f92869028629in 2 reports
- 2e434a724b4759c9…3d635096dd2fin 2 reports
- ocasionalmente[.]siin 1 report
- hxxps://github[.]com/rhboot/shim-reviewin 1 report
Copy these 14 indicators · defanged
Thanks — we review every report.