Skip to content

LazyScripter

LazyScripter is threat group that has mainly targeted the airlines industry since at least 2018, primarily using open-source toolsets.

ATT&CK ID: G0140
Techniques: 13
Tools: 7

Techniques

Resource Development

Acquire Infrastructure Obtain Capabilities Stage Capabilities

Initial Access

Execution

Command and Scripting Interpreter User Execution

Persistence

Boot or Logon Autostart Execution

Privilege Escalation

Boot or Logon Autostart Execution

Stealth

Obfuscated Files or Information Masquerading System Binary Proxy Execution

Command and Control

Application Layer Protocol Web Service Ingress Tool Transfer

Software

Empire · KOCTOPUS · Koadic · QuasarRAT · Remcos · ngrok · njRAT

MITRE ATT&CK All threat actors