How APT41 revived the BlackLotus bootkit to attack diplomatic organizations in Central Asia
// summary
APT41 reportedly revived the BlackLotus bootkit as a new UEFI bootkit, BlackX, exploiting CVE-2022-21894 against diplomatic organizations in Central Asia.
// from the source
Kaspersky GReAT experts discovered a new UEFI bootkit, BlackX. It exploits the Baton Drop vulnerability (CVE-2022-21894) and is similar to the BlackLotus bootkit.