BlackLotus Malware Bypasses UEFI Secure Boot

UPDATE June 25, 2023: Updated the appendix to include a link to the "BlackLotus Mitigation Guide" published by the National Security Agency (NSA).Why is this Significant?This is significant because BlackLotus malware can bypass UEFI Secure Boot giving itself less chance to be detected as the malware is executed before the operating system and traditional OS-based security solutions start.Also, BlackLotus was reportedly seen to be advertised and sold in underground forums as such use of BlackLotus will likely increase in attacks.What …

agency blacklotus boot bypass guide june link malware mitigation national national security national security agency nsa operating system secure boot security system uefi update