highCyber Attacks
BlackX UEFI Bootkit Targets Diplomatic Entities in Central Asia, Bypasses Secure Boot
Diplomatic organizations in Tajikistan, Uzbekistan, and Turkmenistan were targeted in early 2026 by a sophisticated UEFI bootkit named BlackX. Security firm Kaspersky attributes the activity to APT41, a China-linked state-sponsored group. The bootkit bypasses Secure Boot on systems that are patched but lack the necessary firmware revocations to block the malicious component.
The Hacker News1 min read