Netskope Threat Labs

LaZagne

ATP Sandbox Adv. HeuristicsAVNetskope IPS

LaZagne is an open source password recovery tool that recovers saved credentials from browsers, mail clients, and dozens of other applications, and cyberattackers abuse it to steal passwords from infected devices. Its breadth of supported targets and its simple command line interface make it a common post exploitation utility in intrusions. Because legitimate security testing also uses the tool, defenders should triage its detections against authorized activity.

First seen
February 2022
Last seen
October 2026
Lazagne

10 techniques across 1 tactics.

TA0006 Credential Access

Alert Name
Application.HackTool.LaZagne.1
Application.Hacktool.Lazagne.A
Application.Lazagne.G
Application.Lazagne.H
DeepScan:Generic.Application.Lazagne.G.FFFFFFFE
DeepScan:Generic.Application.Lazagne.H.FFFFFFFE
Dropped:Generic.Application.Lazagne.D.EAC8CBB9
Dump:Generic.Application.Lazagne.G.FFFFFFFE
Dump:Generic.Application.Lazagne.H.FFFFFFFE
Generic.Application.Lazagne.D.0213F1B6