MITRE ATT&CKsoftware (malware)

S0397 LoJax

Published 2019-07-02 Modified 2025-04-25 Official page ↗
Domain
enterprise
Platforms
Windows
Version
1.1
Created
2019-07-02

Description

LoJax is a UEFI rootkit used by APT28 to persist remote access software on targeted systems.

Related

Uses · MITRE ATT&CK (5)

  • T1564.004 NTFS File Attributes sub-technique
  • T1547.001 Registry Run Keys / Startup Folder sub-technique
  • T1542.001 System Firmware sub-technique
  • T1014 Rootkit technique
  • T1112 Modify Registry technique

Referenced by MITRE ATT&CK · uses (1)

References