Meet ESPecter: a new UEFI bootkit for cyber spying:
The bootkit is able to load unsigned drivers to hijack the ESP.
zdnet.com/article/meet-especter-a-new-uefi-bootkit-for-cyber-spying/
Similar to This
Previous
cybersecuritynews.com Nov 01
North Korean Hackers Steal Developer Credentials to Inject Malware Into GitHub and Software Packages
cybersecuritynews.com/north-korean-hackers-2/
BlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure Boot: A new UEFI bootkit named BlackX, deployed in an espionage campaign in early 2026 ...
bleepingcomputer.com/news/security/blackx-uefi-bootkit-exploits-baton-drop-flaw-to-bypass-secure-boot/
The Insider Oct 23
GRU-linked hackers wiped data at Ukrainian grain company after two-month intrusion, ESET reports
theins.press/en/news/298666
Security vulnerabilities in shims: Secure Boot has been vulnerable for over ten years - | Golem.de
golem.de/news/sicherheitsluecken-in-shims-secure-boot-laesst-sich-seit-ueber-zehn-jahren-aushebeln-2607-210991.html
BTMOB Android malware service generates custom phishing payloads: An Android remote access trojan named BTMOB is offered to cybercriminals with a builder ...
bleepingcomputer.com/news/security/btmob-android-malware-service-generates-custom-phishing-payloads/
Android malware is now using Gemini AI to adapt in real time (Updated: Google statement)
androidauthority.com/android-malware-promptspy-uses-generative-ai-gemini-3642832/
This Android Malware Connects to Google Gemini for Tips on Hacking Targets: 'PromptSpy' appears to be the first Android malware that uses generative AI in its ...
uk.pcmag.com/ai/163245/this-android-malware-connects-to-google-gemini-for-tips-on-hacking-targets
Your Windows PC needs this patch to ward off nasty bootkit malware - update now: The January Patch Tuesday updates for Windows refresh the expiring certificates ...
zdnet.com/article/windows-patch-turesday-update-bootkit/
New HybridPetya ransomware can bypass UEFI Secure Boot: A recently discovered ransomware strain called HybridPetya can bypass the UEFI Secure Boot feature to ...
bleepingcomputer.com/news/security/new-hybridpetya-ransomware-can-bypass-uefi-secure-boot/
Researchers warn: Dangerous Secure Boot vulnerability allows bootkit installation - | Golem.de
golem.de/news/forscher-warnen-gefaehrliche-secure-boot-luecke-erlaubt-bootkit-installation-2506-197016.html
New Secure Boot flaw lets attackers install bootkit malware, patch now: Security researchers have disclosed a new Secure Boot bypass tracked as CVE-2025-3052 ...
bleepingcomputer.com/news/security/new-secure-boot-flaw-lets-attackers-install-bootkit-malware-patch-now/
World's first CPU-level ransomware can "bypass every freaking traditional technology we have out there" — new firmware-based attacks could usher in new era of ...
tomshardware.com/pc-components/cpus/worlds-first-cpu-level-ransomware-can-bypass-every-freaking-traditional-technology-we-have-out-there-new-firmware-based-attacks-could-usher-in-new-era-of-unavoidable-ransomware
Researchers discover "Bootkitty," the first UEFI bootkit for Linux: Bootkitty is a new and concerning malware that targets Linux systems ...
techspot.com/news/105771-researchers-discover-bootkitty-first-uefi-bootkit-linux.html
BIOS Security Vulnerability Affects Intel CPUs In Hundreds Of Devices: The UEFIcanhazbufferoverflow vulnerability could be used to install dangerous bootkit ...
hothardware.com/news/bios-security-vulnerability-affects-intel-cpus-hundreds-of-devices
Microsoft posts guide for Windows Secure Boot, Defender, VBS, BitLocker-bypassing BlackLotus
neowin.net/news/microsoft-posts-guide-for-windows-secure-boot-defender-vbs-bitlocker-bypassing-blacklotus/
BlackLotus bootkit bypasses UEFI Secure Boot on patched Windows 11: The developers of the BlackLotus UEFI bootkit have improved the malware with Secure Boot ...
bleepingcomputer.com/news/security/blacklotus-bootkit-bypasses-uefi-secure-boot-on-patched-windows-11/
dlvr.it Mar 01 23
It's official: BlackLotus malware can bypass Secure Boot on Windows machines: The myth 'is now a reality'
theregister.com/2023/03/01/blacklotus_malware_eset/
Next