Nullcon Goa 2018:- I Boot when U-Boot

This talk covers the intricacies of a custom-developed bootkit designed for U-Boot based embedded devices. The speaker, Vincent Ruijter, demonstrates how this Fully Weaponised IoT CyberTM bootkit gains persistence at a lower level than the firmware, allowing it to survive firmware updates and factory resets. The session explains the implementation of a malicious killswitch and a multi-boot technique, enabling the switch between a standard and a backdoored operating image for evading detection.