APT41 deploys BlackX UEFI bootkit against Central Asian diplomatic targets in Tajikistan, Uzbekistan and Turkmenistan, using a non-CVE Secure Boot bypass dubbed https://deafnews.it/en/article/apt41-adopts-blacklotus-techniques-blackx-uefi-bootkit-hits-central-asian-diplomats
DeafNewsAPT41 Adopts BlackLotus Techniques: BlackX UEFI Bootkit Hits Central Asian Diplomats | DeafNewsKaspersky GReAT reports that APT41 deployed the BlackX UEFI bootkit against diplomatic agencies in Tajikistan, Uzbekistan, and Turkmenistan in Q1 2026, exploiting a non-CVE vulnerability dubbed Baton Drop to bypass Secure Boot.