FishMonger

Mentions · 7d2
Mentions · 30d2
All mentions2
First seenOct 26, 2026
Last mentioned4d ago

Timeline

2 articles · newest first

BlackX bootkit bypasses Windows Secure Boot in Central Asia attacks

Securelist says fully patched PCs stayed exposed because boot-certificate revocations were incomplete; the APT41 link is only medium confidence.

Cyber Security NewsOct 27, 01:43 UTC · 4d agoThreat actorExploited3 sourcesCVE-2022-218941

BlackX UEFI bootkit found on fully patched Windows PCs in Central Asia

Kaspersky says the Secure Boot revocation that would block Baton Drop stays off unless an admin enables KB5025885 by hand.

Hacker News · securityupdated Oct 27, 01:43 UTC · 4d agofirst Oct 26, 19:29 UTC · 4d agoMalwareExploited3 sources HN 21 points · 0 commentsCVE-2022-21894 CVE-2023-249321

Related CVEs

by mentions

CVE-2022-218947%4.4
Secure Boot Security Feature Bypass Vulnerability
published Jan 11, 2022microsoft windows 10
CVE-2023-2493211%6.7
Secure Boot Security Feature Bypass Vulnerability
published May 9, 2023microsoft windows 10 1507

Appears with

APT41threat actor · 2
Microsoftvendor · 2
BlackXmalware · 2
Windowsproduct · 2
OxiDLLRunnermalware · 2
BlackLotusmalware · 2
Kasperskyorganization · 2

Entities are extracted by the model from each article. First seen Oct 26, 2026, last mentioned 4d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.