As cited
Copy frozen at (site build).
threat intel
BlackX UEFI Bootkit Bypasses Secure Boot on Patched Windows Systems Missing Revocations
A UEFI bootkit called BlackX has targeted diplomatic organizations in Central Asia, including Tajikistan, Uzbekistan, and Turkmenistan. Kaspersky attributes the campaign to APT41, a China-linked state-sponsored group, and notes the malware bypasses Secure Boot on patched Windows systems that lack certificate revocations.
Why it matters: Diplomatic missions and government agencies in Central Asia are exposed to persistent firmware-level compromise; defenders should review UEFI firmware revocation lists and consider enhanced firmware integrity monitoring.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
threat intel
BlackX UEFI Bootkit Bypasses Secure Boot on Patched Windows Systems Missing Revocations
A UEFI bootkit called BlackX has targeted diplomatic organizations in Central Asia, including Tajikistan, Uzbekistan, and Turkmenistan. Kaspersky attributes the campaign to APT41, a China-linked state-sponsored group, and notes the malware bypasses Secure Boot on patched Windows systems that lack certificate revocations.
Why it matters: Diplomatic missions and government agencies in Central Asia are exposed to persistent firmware-level compromise; defenders should review UEFI firmware revocation lists and consider enhanced firmware integrity monitoring.
- Source published
- First seen by Cybersecurity Tracker