LazyScripter

· ATT&CK GroupG0140

Techniques

Software

Tactics

Aliases

Description

LazyScripter is threat group that has mainly targeted the airlines industry since at least 2018, primarily using open-source toolsets.(Citation: MalwareBytes LazyScripter Feb 2021)

Tactic Coverage

execution (6)stealth (4)resource development (4)command and control (3)initial access (2)persistence (1)privilege escalation (1)

Techniques Used (20)

T1027.010Command Obfuscation

stealth

T1036Masquerading

stealth

T1059.001PowerShell

execution

T1059.003Windows Command Shell

execution

T1059.005Visual Basic

execution

Registration Required

Create a free account to access full Threat Actor Techniques

Showing 5 of 20 results

✓ Personal dashboard✓ Track 1 vendor/product✓ 1 keyword alert✓ Weekly digest✓ 1 CSV export/month

Already have an account? Sign in →

Software Used (7)

S0363Empiretool S0669KOCTOPUSmalware S0250Koadictool S0262QuasarRATtool S0332Remcostool S0508ngroktool S0385njRATmalware

References (3)

https://attack.mitre.org/groups/G0140 https://web.archive.org/web/20211003035156/https://www.malwarebytes.com/resources/files/2021/02/lazyscripter.pdf