IOCs

Stories with indicators of compromise: attacker IPs, domains, URLs and file hashes to hunt for and block.

1 story matches your filters.

HighCVE-2022-21894 5 Hunt LeadsIOCs Hands-On-Keyboard APT41 BlackX OxiDLLRunner Kaspersky Securelist

BlackX Bootkit Beats Secure Boot on Fully Patched Windows

Kaspersky found BlackX, a UEFI bootkit used against Central Asian diplomats that bypasses Secure Boot via Baton Drop because Microsoft's revocation step was never applied. Medium-confidence link to APT41.

Oct 27, 2026