corpus.blog
41,554 blogs · 5,316,985 posts Claim your blog
Record · corpus.blog/posts/01a087eb-162e-719c-bff0-3aa840991e68

Rootkits - how deep the rabbit hole is?

telefoncek.si · published 11 December 2025

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at telefoncek.si Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
External links
72
Words captured
6,919

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://www.cs.vu.nl/~herbertb/papers/bootkits_dimva2015.pdf
cs.vu.nl
https://www.webroot.com/blog/2011/09/13/mebromi-the-first-bios-rootkit-in-the-wild/
webroot.com
https://www.bitdefender.com/en-us/blog/hotforsecurity/new-blacklotus-uefi-bootkit-for-windows-sold-on-cybercrime-forums
bitdefender.com
https://theinvisiblethings.blogspot.com/2009/10/evil-maid-goes-after-truecrypt.html
theinvisiblethings.blogspot.com
https://www.telegraph.co.uk/news/worldnews/middleeast/israel/8514919/Mossad-car-ries-out-daring-London-raid-on-Syrian-official.html
telegraph.co.uk
https://en.wikipedia.org/wiki/Hypervisor
en.wikipedia.org
https://blog.invisiblethings.org/2006/08/12/blue-pill-detection.html
blog.invisiblethings.org
https://en.wikipedia.org/wiki/X86_virtualization
en.wikipedia.org
https://www.blackhat.com/presentations/bh-usa-06/BH-US-06-Zovi.pdf
blackhat.com
https://www.microsoft.com/en-us/research/wp-content/uploads/2016/02/subvirt.pdf
microsoft.com
https://www.youtube.com/watch?v=iffTJ1vPCSo
youtube.com
https://en.wikipedia.org/wiki/System_Management_Mode
en.wikipedia.org
https://jussihi.kapsi.fi/2022-09-08-smmrootkit/
jussihi.kapsi.fi
https://www.blackhat.com/presentations/bh-jp-05/bh-jp-05-sparks-butler.pdf
blackhat.com
https://www.eecs.ucf.edu/~czou/research/SMM-Rootkits-Securecom08.pdf
eecs.ucf.edu
https://dl.acm.org/doi/abs/10.1145/1460877.1460892
dl.acm.org
https://github.com/jussihi/SMM-Rootkit
github.com
http://www.vxjump.net/files/seccon/bktrend.pdf
vxjump.net
https://www.blackhat.com/html/bh-us-12/bh-us-12-briefings.html
blackhat.com
https://www.darkreading.com/vulnerabilities-threats/black-hat-researcher-demonstrates-hardware-backdoor
darkreading.com
https://www.theregister.com/2011/09/14/bios_rootkit_discovered/
theregister.com
https://web.archive.org/web/20141020143936/http://news.saferbytes.it/analisi/2012/09/uefi-technology-say-hello-to-the-windows-8-bootkit/
web.archive.org
https://web.archive.org/web/20140330021325/https://www.quarkslab.com/dl/13-04-hitb-uefi-dreamboot.pdf
web.archive.org
https://github.com/AaLl86/retroware?tab=readme-ov-file
github.com
https://en.wikipedia.org/wiki/HackingTeam
en.wikipedia.org
https://slo-tech.com/novice/t647903/0
slo-tech.com
https://slo-tech.com/novice/t649095
slo-tech.com
https://slo-tech.com/novice/t566153
slo-tech.com
https://www.kaspersky.com/about/press-releases/finfisher-spyware-improves-its-arsenal-with-four-levels-of-obfuscation-uefi-infection-and-more
kaspersky.com
MoonBounce: the dark side of UEFI firmware Read at the source ↗
securelist.com
https://www.trendmicro.com/vinfo/us/security/news/cyber-attacks/lojax-uefi-rootkit-used-in-cyberespionage
trendmicro.com
https://media.blackhat.com/bh-us-12/Briefings/Loukas_K/BH_US_12_LoukasK_De_Mysteriis_Dom_Jobsivs_Slides.pdf
media.blackhat.com
https://www.bleepingcomputer.com/news/security/intel-security-mcafee-releases-rootkit-scanner-following-vault-7-cia-leak/
bleepingcomputer.com
https://www.welivesecurity.com/en/eset-research/bootkitty-analyzing-first-uefi-bootkit-linux/
welivesecurity.com
https://eclypsium.com/blog/bootkitty-linux-bootkit/
eclypsium.com
https://www.youtube.com/watch?v=NqQI3nr1dqk
youtube.com
https://www.binarly.io/blog/the-far-reaching-consequences-of-logofail
binarly.io
https://arstechnica.com/security/2024/07/secure-boot-is-completely-compromised-on-200-models-from-5-big-device-makers/
arstechnica.com
https://invisiblethingslab.com/resources/bh09usa/Ring%20-3%20Rootkits.pdf
invisiblethingslab.com
https://people.kth.se/~maguire/DEGREE-PROJECT-REPORTS/100402-Vassilios_Ververis-with-cover.pdf
people.kth.se
https://www.blackhat.com/docs/eu-17/materials/eu-17-Goryachy-How-To-Hack-A-Turned-Off-Computer-Or-Running-Unsigned-Code-In-Intel-Management-Engine.pdf
blackhat.com
https://www.exploit-db.com/docs/english/48226-manually-exploiting-intel-amt-vulnerability-cve-2017-5689-%5Bpaper%5D.pdf
exploit-db.com
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00086.html
intel.com
https://www.zdnet.com/article/intel-amt-vulnerability-hits-business-chips-from-2008-onwards/
zdnet.com
https://www.bleepingcomputer.com/news/security/malware-uses-obscure-intel-cpu-feature-to-steal-data-and-avoid-firewalls/
bleepingcomputer.com
https://en.wikipedia.org/wiki/Wizard_Spider
en.wikipedia.org
https://www.techtarget.com/searchsecurity/news/252521002/Conti-ransomware-group-targeted-Intel-firmware-tools
techtarget.com
https://github.com/corna/me_cleaner
github.com
https://comsecuris.com/slides/Weinmann-All-Your-Baseband-Are-Belong-To-Us-slides.pdf
comsecuris.com
https://www.blackhat.com/us-19/briefings/schedule/index.html
blackhat.com
https://cve.mitre.org/cgi-bin/cvename.cgi?name=2019-10538
cve.mitre.org
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10540
cve.mitre.org
https://en.wikipedia.org/wiki/Buffer_overflow
en.wikipedia.org
https://www.enea.com/insights/simjacker-next-generation-spying-over-mobile/
enea.com
https://www.alchemistowl.org/arrigo/Papers/Arrigo-Triulzi-PACSEC08-Project-Maux-II.pdf
alchemistowl.org
https://web.archive.org/web/20090929091150/http://slo-tech.com/clanki/09010/en
web.archive.org
https://slo-tech.com/clanki/09010/
slo-tech.com
http://spritesmods.com/?art=hddhack
spritesmods.com
https://slo-tech.com/novice/t576113/0
slo-tech.com
https://www.malwaretech.com/2015/06/hard-disk-firmware-rootkit-surviving.html
malwaretech.com
https://elhacker.info/manuales/Virus/(Superpersistent%20Bootkit
elhacker.info
https://www.schneier.com/blog/archives/2014/01/iratemonk_nsa_e.html
schneier.com
https://slo-tech.com/clanki/13002/
slo-tech.com
https://www.blackhat.com/presentations/bh-usa-09/CHEN/BHUSA09-Chen-RevAppleFirm-PAPER.pdf
blackhat.com
https://www.blackhat.com/presentations/bh-dc-07/Heasman/Paper/bh-dc-07-Heasman-WP.pdf
blackhat.com
https://en.wikipedia.org/wiki/Row_hammer
en.wikipedia.org
https://www.usenix.org/legacy/event/leet08/tech/full_papers/king/king.pdf
usenix.org
https://www.schneier.com/blog/archives/2008/10/designing_a_mal.html
schneier.com
https://slo-tech.com/novice/t294554
slo-tech.com
https://www.researchgate.net/publication/301317714_A_Survey_on_Chip_to_System_Reverse_Engineering
researchgate.net
https://sharps.org/wp-content/uploads/BECKER-CHES.pdf
sharps.org
https://www.bleepingcomputer.com/news/security/conti-ransomware-targeted-intel-firmware-for-stealthy-attacks/
bleepingcomputer.com
Elsewhere on telefoncek.si (2)