NSA Releases Guide to Combat Powerful BlackLotus Bootkit Targeting Windows Systems

[MuzzMelbourne]

Content source

https://thehackernews.com/2023/06/nsa-releases-guide-to-combat-powerful.html

The U.S. National Security Agency (NSA) on Thursday released guidance to help organizations detect and prevent infections of a Unified Extensible Firmware Interface (UEFI) bootkit called BlackLotus.

To that end, the agency is recommending that "infrastructure owners take action by hardening user executable policies and monitoring the integrity of the boot partition."

BlackLotus is an advanced crimeware solution that was first spotlighted in October 2022 by Kaspersky. A UEFI bootkit capable of bypassing Windows Secure Boot protections, samples of the malware have since emerged in the wild.

NSA Releases Guide to Combat Powerful BlackLotus Bootkit Targeting Windows Systems

NSA shares crucial guidance to detect and tackle BlackLotus: a powerful UEFI bootkit bypassing Windows Secure Boot, granting attackers full control.

thehackernews.com