CVE-2022-21894Vulnerability
Reported by 2 independent sources · first reported by Kaspersky Securelist · last reported
Last reported yesterday
What the reports say
2 reports, newest first · the exact sentence from each-
BlackX UEFI Bootkit Bypasses Secure Boot on Patched Windows Systems Missing Revocations“BlackLotus is designed to exploit a now-patched Secure Boot bypass vulnerability tracked as CVE-2022-21894 (CVSS score: 4.4), also known as Baton Drop, to load malicious code before the operating system starts.”
-
How APT41 revived the BlackLotus bootkit to attack diplomatic organizations in Central Asia“… tracked down samples of this bootkit and confirmed that it can indeed bypass Secure Boot through a vulnerability called Baton Drop (CVE-2022-21894).”
Indicators reported together
named in the same reports- 0bcdf5e0da32d68900b8b7638459d072in 1 report
- af8a983b9ada07eae1259bf2953abd40in 1 report
- www.archivetj[.]comin 1 report
- archivetj[.]comin 1 report
Copy these 4 indicators · defanged
Thanks — we review every report.