Hello, you are using an old browser that's unsafe and no longer supported. Please consider updating your browser to a newer version, or downloading a modern browser.

Global Accelerated Learning • Est. 1999
Glossary Term Bootkit

Training Camp • Cybersecurity Glossary

What is Bootkit?

A bootkit infects UEFI firmware or the boot loader to run before the OS, enabling stealthy persistence that Secure Boot and firmware integrity help counter.

Glossary > Threats, Malware & Attacks > Bootkit

Understanding Bootkit

A bootkit is a form of malware that infects the early boot process, such as the UEFI firmware, master boot record, or boot loader, so it executes before the operating system and any security controls load. By gaining control this early, bootkits achieve deep persistence and stealth, surviving OS reinstalls and evading many defenses; UEFI bootkits like BlackLotus illustrate the threat and the value of Secure Boot and firmware integrity verification.

Learn More About Bootkit:

Ready to Get Certified?

Turn knowledge into credentials with our instructor-led cybersecurity boot camps.

View All Courses →