Threat actor
APT41
Tracked by CyberSIXT since Apr 13, 2026 · last activity Oct 23, 2026
Associated CVEs
Coverage timeline
RSS-
BlackX Bootkit Bypasses Secure Boot in Central Asian Attacksthehackernews.com · Oct 23, 2026
-
APT41 Uses a BlackX UEFI Bootkit to Bypass Secure Boot in Central Asiasecurityonline.info · Oct 22, 2026
-
APT41 uses Linux cloud backdoor to steal credentials via SMTPwww.darkreading.com · Apr 13, 2026