--- title: Bootkitty: First UEFI Bootkit Targets Linux as Part of... description: Researchers at ESET have unveiled Bootkitty, the first UEFI bootkit targeting Linux systems. Developed by students for a cybersecurity competition, Bootkitty... canonical: https://daily.dev/posts/bootkitty-first-uefi-bootkit-targets-linux-as-part-of-student-cybersecurity-project-zlzuiqj10 twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Bootkitty: First UEFI Bootkit Targets Linux as Part of Student Cybersecurity Project | daily.dev og:description: Researchers at ESET have unveiled Bootkitty, the first UEFI bootkit targeting Linux systems. Developed by students for a cybersecurity competition, Bootkitty... og:url: https://daily.dev/posts/bootkitty-first-uefi-bootkit-targets-linux-as-part-of-student-cybersecurity-project-zlzuiqj10 og:image: https://api.daily.dev/og/posts/ZLZUIqJ10.png og:image:alt: Bootkitty: First UEFI Bootkit Targets Linux as Part of Student Cybersecurity Project og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Bootkitty: First UEFI Bootkit Targets Linux as Part of Student Cybersecurity Project **[Collections](https://daily.dev/sources/collections)** · 2 min read · 1 upvotes · 0 comments ## Summary Researchers at ESET have unveiled Bootkitty, the first UEFI bootkit targeting Linux systems. Developed by students for a cybersecurity competition, Bootkitty exploits the CVE-2023-40238 LogoFAIL vulnerability to bypass secure boot processes and disable kernel signature verification, highlighting potential risks for Linux environments previously seen in Windows platforms. The discovery underscores the need for enhanced security in Linux systems to prevent such sophisticated threats. ## Content # Bootkitty: The First UEFI Bootkit Targeting Linux Unveiled as Student Project ### Overview In a significant development for the cybersecurity landscape, researchers at ESET have uncovered **Bootkitty**, the first-ever UEFI bootkit devised for Linux systems. Surprisingly, this bootkit, leveraging the CVE-2023-40238 LogoFAIL vulnerability in UEFI, is not the work of cybercriminals but rather a proof-of-concept (PoC) crafted by students for a cybersecurity competition. ### What is Bootkitty? Bootkitty, developed by Korean students, marks the transition of UEFI bootkits from a Windows-centric threat to a potential risk for Linux-based systems. The bootkit exploits the LogoFAIL vulnerability to bypass secure boot processes and disable kernel signature verification, thus preloading malware during the boot-up sequence. Despite being an academic project rather than a piece of production-ready malware, Bootkitty is a stark reminder that Linux systems are not immune to such sophisticated threats. ### Implications for Linux Security Historically, UEFI bootkit threats were confined to Windows platforms. The emergence of Bootkitty signifies that these security concerns are expanding to Linux environments. Although currently restricted to certain configurations of Ubuntu, Bootkitty's existence indicates the potential for more advanced and damaging versions in the future. ### Conclusion While Bootkitty is a proof-of-concept created in a controlled academic setting, its discovery by ESET researchers underscores a critical need for enhanced security measures in Linux bootloaders and systems. The ability of UEFI bootkits like Bootkitty to overcome significant security defenses at such an early stage of system initialization is an alarming development, highlighting that continuous vigilance and advanced security protocols are essential to safeguard against evolving threats. ## Similar posts on daily.dev - [Don’t just attend KubeCon \+ CloudNativeCon, Merge Forward your experience\!](https://daily.dev/posts/don-t-just-attend-kubecon-cloudnativecon-merge-forward-your-experience--l0rpp73x8) · CNCF · 1 upvotes · 0 comments - [Announcing H2 2026 KCDs](https://daily.dev/posts/announcing-h2-2026-kcds-m96goajm1) · CNCF · 1 upvotes · 0 comments - [Two months of Open Community Groups](https://daily.dev/posts/two-months-of-open-community-groups-asf52zhbs) · CNCF · 0 upvotes · 0 comments - [CNCF Unveils Schedule for KubeCon \+ CloudNativeCon Europe 2026](https://daily.dev/posts/cncf-unveils-schedule-for-kubecon-cloudnativecon-europe-2026-ikhcoa5cb) · CNCF · 2 upvotes · 0 comments - [CNCF Debuts KubeCon \+ CloudNativeCon Japan 2026 Schedule](https://daily.dev/posts/cncf-debuts-kubecon-cloudnativecon-japan-2026-schedule-xp5pyudub) · CNCF · 1 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#cyber](https://daily.dev/tags/cyber), [#linux](https://daily.dev/tags/linux), [#vulnerability](https://daily.dev/tags/vulnerability) [View this post on daily.dev](https://daily.dev/posts/bootkitty-first-uefi-bootkit-targets-linux-as-part-of-student-cybersecurity-project-zlzuiqj10) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Bootkitty: First UEFI Bootkit Targets Linux as Part of Student Cybersecurity Project","url":"https://daily.dev/posts/bootkitty-first-uefi-bootkit-targets-linux-as-part-of-student-cybersecurity-project-zlzuiqj10","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/bootkitty-first-uefi-bootkit-targets-linux-as-part-of-student-cybersecurity-project-zlzuiqj10"},"datePublished":"2024-12-03T21:54:40.388Z","dateModified":"2024-12-04T13:16:12.449Z","description":"Researchers at ESET have unveiled Bootkitty, the first UEFI bootkit targeting Linux systems. Developed by students for a cybersecurity competition, Bootkitty...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/9482fea7ef951178eb8fa3312defa3c9?_a=AQAEuj9","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/9482fea7ef951178eb8fa3312defa3c9?_a=AQAEuj9","isAccessibleForFree":true,"articleSection":"Collections","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Collections","logo":"https://media.daily.dev/image/upload/s--fk_6ycEi--/f_auto,q_auto/v1780996001/logos/collections?_a=BAMAMiWQ0","url":"https://daily.dev/sources/collections"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/bootkitty-first-uefi-bootkit-targets-linux-as-part-of-student-cybersecurity-project-zlzuiqj10","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,cyber,linux,vulnerability","timeRequired":"PT2M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Collections","item":"https://daily.dev/sources/collections"},{"@type":"ListItem","position":3,"name":"Bootkitty: First UEFI Bootkit Targets Linux as Part of Student Cybersecurity Project"}]} ```