LaZagne

LaZagne is a password recovery tool whose full source code is published online. The author says that this project is not meant to be used for harmful purposes, but it is not a surprise that various cybercriminals have already started to abuse LaZagne in their attacks. By using this tool, hackers may be able to obtain login credentials from compromised hosts. The good news is that LaZagne is identified as a threat by trustworthy anti-virus products, and users can stay safe from such attacks by using an up-to-date anti-malware tool.

Keep in mind that your anti-virus software may report LaZagne as a threat even if you are trying to run the tool to restore your passwords. In case you are running LaZagne intentionally, then you should know that the application is safe-to-use. However, if you did not plan to recover any of your passwords and see a warning about LaZagne's execution, you should know that this is likely to be the job of cybercriminals.

A Legitimate Software Being Misused by Cybercriminals

LaZagne's functionality as a password recovery tool is rather impressive. It is compatible with popular Web browsers like Google Chrome, Mozilla Firefox, Internet Explorer and Opera. On top of this, it can snatch login credentials and information from many other Web browsers based on the Chromium or Gecko projects. The LaZagne tool also tries to grab passwords used by popular messaging services like Pidgin, Psi and Skype. Database management software is also targeted by LaZagne – it can look for credentials used by Postgresql, Robomongo, Squirrel, SQLdevelopper and DBVisualizer.

Other impressive features of LaZagne are its ability to recover credentials from email clients, as well as from various tools used by system administrators – FTP clients, Remote Desktop software, Docker, AWS, SSH keys, KeePass and more.

It is not atypical for threat actors to utilize legitimate tools in their attacks. Considering LaZagne's rich functionality, it is not a surprise that cybercriminals have opted to include this tool in their arsenal. Thankfully, a reputable anti-virus product is enough to keep your credentials safe from LaZagne and similar software.