negativeSYS.SOURCE: The Hacker News• 2026-10-24T00:20:13+05:30
Sophisticated BlackX UEFI Bootkit Exploits Secure Boot Bypass in Patched Windows Systems
A sophisticated UEFI bootkit named BlackX has been used to bypass Secure Boot on patched Windows systems, targeting diplomatic organizations in Central Asia. The attack is linked to the China-linked APT41 group, exploiting missing revocations in firmware security.
Diplomatic organizations in Central Asia have been targeted by a sophisticated new Unified Extensible Firmware Interface (UEFI) bootkit called BlackX.
The activity, which singled out diplomatic entities in Tajikistan, Uzbekistan, and Turkmenistan in early 2026, is suspected to be orchestrated by a China-linked state-sponsored hacking group known as APT41, Kaspersky said in a technical report
*** END OF TRANSMISSION ***