Fully patched machines still got a bootkit: BlackX, the BlackLotus copycat, and the patch nobody switched on
Summary In early 2026, Kaspersky GReAT identified an APT campaign against diplomatic agencies in Tajikistan, Uzbekistan and Turkmenistan that involved a UEFI bootkit they named BlackX. On examination,
#uefi-bootkit#secure-boot#blacklotus#blackx#baton-drop#cve-2022-21894#apt41#fishmonger#kaspersky-great#patch-management#threat-intelligence
Responses
Markdown supported · ⌘↵ to post
No responses yet.