/
ttps_attack:T1574.002 × criticity:high × latest_source_host:securelist.com × limpar

Resultados

2 casos · pág. 1/1

securelist.com · high

APT41 deploys BlackX UEFI bootkit, a BlackLotus copycat exploiting Baton Drop, against Central Asian diplomatic agencies

Kaspersky GReAT identified an APT campaign in early 2026 targeting diplomatic agencies in Tajikistan, Uzbekistan and Turkmenistan. The attackers used a UEFI bootkit dubbed BlackX, which closely resembles BlackLotus and bypasses Secure Boot by exploiting Baton Drop (CVE-2022-21894). Kaspersky attributes the activity to APT41 with medium co…

CVE-2022-21894 CVE-2023-24932 APT41 FishMonger government diplomatic
securelist.com · high

ValleyRAT backdoor distributed via trojanized QN Wallpaper adware installer using libcef.dll sideloading, likely Silver Fox

Kaspersky analysis of an installer first classified as adware (MD5 c24e99f9437feacaa63766a3cde3fe3d) found that it delivers the ValleyRAT backdoor. The installer drops a modified, signed Chinese wallpaper tool, QN Wallpaper, and uses it for DLL sideloading of a malicious libcef.dll. The adware's advertising function does not work. Attacke…

Silver Fox