Final on Nostr: This malware is reported as a proof of concept. There's some limitations with this ...

This malware is reported as a proof of concept. There's some limitations with this sample, such as it doesn't work with UEFI Secure Boot enabled. Linux distributions do a shit job and not all support using it though. It's also likely to be found in digital forensic analysis.

Warez forums have sold bootkits with bypasses for these measures before, but they exploited known, patched CVEs. If zero-days are involved (like a nation state) they'd be better with a remote exploit. Bootkit main benefit is persistence.