New UEFI rootkit Black Lotus offered for sale at $5,000


A new Windows UEFI rootkit known as Black Lotus is being advertised on darknet criminal forums, according to cybersecurity researcher Scott Scheferman. With $200 payments for each new update, the potent malware is offered for sale for $5,000.

The researcher cautions that because of this rootkit’s evasion and persistence abilities, its presence in the threat environment poses a major risk to companies. Black Lotus is only 80kb in size and is built in assembly and C. The malicious malware can be modified to prevent infecting systems in nations in the CIS region. Read More…