How APT41 revived the BlackLotus bootkit to attack diplomatic organizations in Central Asia

Imported from official source

October 22, 2026 06:00

Cybersecurity Classified by Officially

Kaspersky GReAT experts discovered a new UEFI bootkit, BlackX. It exploits the Baton Drop vulnerability (CVE-2022-21894) and is similar to the BlackLotus bootkit.

This is an extract. The publication continues at the source.

Read the original at the source: https://securelist.com/uefi-bootkit-blackx/121539/

Officially imported this from Kaspersky Securelist’s own source and shows an extract. If you work there, claiming the profile and verifying the domain lets you choose to show the full text here.

Provenance

Organization: Kaspersky Securelist — imported from official source
Official source: https://securelist.com/feed/ RSS
Imported: October 22, 2026 07:00
Versions: 1 recorded
Identity: https://kasperskycontenthub.com/securelist/?p=121539