Malware
Griffon
aka Harpy
GRIFFON is a lightweight JavaScript validator-style implant without any persistence mechanism.
Griffon, also known as Harpy, is a JavaScript malware family operated by FIN7.
Background
GRIFFON is a small validator-style implant written in JavaScript that has no persistence mechanism. It is built to pull down modules, run them entirely in memory, and report the output back to its C2 servers. The initial module GRIFFON retrieves onto a victim host is a reconnaissance script that lets the operators assess the nature of the compromised workstation.
Source: Malpedia (Fraunhofer FKIE).