APT41

BlackX UEFI Bootkit Bypasses Secure Boot on Fully Patched Windows Systems

Excerpt: Kaspersky researchers uncovered BlackX, a UEFI bootkit used against diplomatic targets in Central Asia. The malware exploits CVE-2022-21894 where Windows Secure Boot revocations remain unapplied, even when systems have received updates.