From pentest to APT attack: cybercriminal group FIN7 disguises its malware as an ethical hackers toolkit

FIN7 known for its APT attacks on various organisations around the globe. FIN7 developed Lizar (formerly known as Tirion), a toolkit for reconnaissance and getting a foothold inside infected systems. Disguised as a legitimate cybersecurity company, the group distributes Lizar as a pentesting tool for Windows networks. Lizar toolkit is structurally similar to Carbanak, which is used to masquerade as Check Point Software Technology and Forcepoint. The latest version of Lizar, 2.0.4, was discovered in February 2021.”]

Source: https://bi-zone.medium.com/from-pentest-to-apt-attack-cybercriminal-group-fin7-disguises-its-malware-as-an-ethical-hackers-c23c9a75e319