Tag: linux

ESET Research discovers UEFI Secure Boot bypass vulnerability

January 16, 2025

ESET researchers have discovered a vulnerability, affecting the majority of UEFI-based systems, that allows actors to bypass UEFI Secure Boot. This vulnerability, assigned CVE-2024-7344, was found in a UEFI application signed by Microsoft’s “Microsoft Corporation UEFI CA 2011” third-party UEFI certificate. ESET researchers discovered a new vulnerability, CVE-2024-7344, that allows actors to bypass UEFI Secure … More ESET Research discovers UEFI Secure Boot bypass vulnerability

ESET Research discovers the first UEFI bootkit for Linux

November 27, 2024

ESET Research has discovered the first UEFI bootkit designed for Linux systems, which has been named Bootkitty by its creators. In November 2024, a previously unknown application, named bootkit.efi, was uploaded to VirusTotal. Upon inspection, ESET Research discovered it to be a UEFI application. Further analysis confirmed that it is a UEFI bootkit, named Bootkitty … More ESET Research discovers the first UEFI bootkit for Linux

ESET Research discovers WolfsBane, new Linux cyberespionage backdoor by Gelsemium APT

November 21, 2024

ESET researchers have identified multiple samples of a Linux backdoor, which they named WolfsBane and attribute with high confidence to Gelsemium advanced persistent threat (APT) group. ESET researchers have identified multiple samples of the Linux backdoor WolfsBane and attribute it with high confidence to Gelsemium APT group The goal of the discovered backdoors and tools … More ESET Research discovers WolfsBane, new Linux cyberespionage backdoor by Gelsemium APT

Small but mighty: Top 5 pocket-sized gadgets to boost your ethical hacking skills

July 17, 2024

These five formidable bits of kit that can assist cyber-defenders in spotting chinks in corporate armors and help hobbyist hackers deepen their understanding of cybersecurity. While blue teams defend, red teams attack. They share a common goal, however – help identify and address gaps in organizations’ defenses before these weaknesses can be exploited by malicious … More Small but mighty: Top 5 pocket-sized gadgets to boost your ethical hacking skills

400k Linux servers compromised for cryptocurrency theft and financial gain

May 15, 2024

One of the most advanced server-side malware campaigns is still growing, with hundreds of thousands of compromised servers, and it has diversified to include credit card and cryptocurrency theft. ESET Research has released its deep-dive investigation into one of the most advanced server-side malware campaigns, which is still growing – Ebury group with their malware … More 400k Linux servers compromised for cryptocurrency theft and financial gain