LoJax

· MalwareS0397 · Zararlı Yazılım

Type

malware

Techniques

Used By

1 groups

Platforms

Windows

Description

LoJax is a UEFI rootkit used by APT28 to persist remote access software on targeted systems.(Citation: ESET LoJax Sept 2018)

Tactic Coverage

stealth (3)persistence (3)defense impairment (1)privilege escalation (1)

Used By (1 groups)

Techniques (5)

T1014Rootkit

stealth

T1112Modify Registry

defense impairmentpersistence

T1542.001System Firmware

stealthpersistence

T1547.001Registry Run Keys / Startup Folder

persistenceprivilege escalation

T1564.004NTFS File Attributes

stealth

References