How APT41 revived the BlackLotus bootkit to attack diplomatic organizations in Central Asia

Kaspersky Securelist Version 1 original current

Imported from official source

Kaspersky GReAT experts discovered a new UEFI bootkit, BlackX. It exploits the Baton Drop vulnerability (CVE-2022-21894) and is similar to the BlackLotus bootkit.

This version

Version
1 of 1
Recorded
October 22, 2026 07:00
Change
Initial
Content hash
bf4b8067e33c5dcf0f12085218f1fa4f
All versions
Revision history

Officially records where a publication came from, not whether it is true. Imported records are reproduced from an organization's own official source.