GRIFFON

MITRE

Malware Type:
Other

First seen:
Unknown

Last seen:
Unknown

Details:

[GRIFFON](https://attack.mitre.org/software/S0417) is a JavaScript backdoor used by [FIN7](https://attack.mitre.org/groups/G0046). (Citation: SecureList Griffon May 2019)

Associated Techniques (8)

ID	ATT&CK	Tactics
T1053.005	Scheduled Task	-
T1059.001	PowerShell	-
T1059.007	JavaScript	-
T1069.002	Domain Groups	-
T1082	System Information Discovery	-
T1113	Screen Capture	-
T1124	System Time Discovery	-
T1547.001	Registry Run Keys / Startup Folder	-

Used by Actors (1)

FIN7
Criminal

Metadata

ID:	17
Created:	13/01/2026 17:48
Updated:	21/04/2026 04:00