MITRE ATT&CK / Software / S0397
LoJax
- ID
- S0397
- Type
- Malware
- Platforms
- Windows
- Source
- attack.mitre.org
- MITRE last modified
- 25 Apr 2025
LoJax is a UEFI rootkit used by APT28 to persist remote access software on targeted systems.[1]
Techniques used (5)
Groups using it (1)
References
- ESET LoJax Sept 2018
