LazyScripter
- ID
- G0140
- Source
- attack.mitre.org
- MITRE last modified
- 1 Aug 2026
LazyScripter is threat group that has mainly targeted the airlines industry since at least 2018, primarily using open-source toolsets.[1]
Techniques used (20)
- T1027.010 Command Obfuscation
- T1036 Masquerading
- T1059.001 PowerShell
- T1059.003 Windows Command Shell
- T1059.005 Visual Basic
- T1059.007 JavaScript
- T1071.004 DNS
- T1102 Web Service
- T1105 Ingress Tool Transfer
- T1204.001 Malicious Link
- T1204.002 Malicious File
- T1218.005 Mshta
- T1218.011 Rundll32
- T1547.001 Registry Run Keys / Startup Folder
- T1566.001 Spearphishing Attachment
- T1566.002 Spearphishing Link
- T1583.001 Domains
- T1583.006 Web Services
- T1588.001 Malware
- T1608.001 Upload Malware