Kaspersky

Kaspersky researchers at Securelist have detailed BlackX, a newly discovered UEFI bootkit that bypasses Secure Boot protections in attacks on diplomatic agencies across Central Asia. The implant resides in firmware, persisting below the operating system and making detection difficult. Analysts link the tooling to an APT campaign and describe it as a resurgence of Secure Boot exploits in state-aligned espionage operations in the region.