A sophisticated UEFI bootkit dubbed BlackX has been deployed against diplomatic targets in Central Asia. Attributed to the APT41 threat group, the malware bypasses Secure Boot mechanisms on Windows systems that lack proper certificate revocations. This allows attackers to achieve deep firmware-level persistence, requiring thorough system audits and manual remediation for affected enterprise networks.

UEFIbootkitSecure BootAPT41
READ THE ORIGINAL ARTICLE AT THEHACKERNEWS.COM →