MITRE ATT&CKgroup
G0140 LazyScripter
- Domain
- enterprise
- Version
- 1.1
- Created
- 2021-11-24
Description
LazyScripter is threat group that has mainly targeted the airlines industry since at least 2018, primarily using open-source toolsets.
Related
Uses · MITRE ATT&CK (27)
- S0508 ngrok software (tool)
- T1027.010 Command Obfuscation sub-technique
- S0669 KOCTOPUS software (malware)
- T1608.001 Upload Malware sub-technique
- T1583.006 Web Services sub-technique
- T1588.001 Malware sub-technique
- T1583.001 Domains sub-technique
- T1059.007 JavaScript sub-technique
- T1071.004 DNS sub-technique
- T1204.001 Malicious Link sub-technique
- T1204.002 Malicious File sub-technique
- T1059.001 PowerShell sub-technique
- T1059.003 Windows Command Shell sub-technique
- T1059.005 Visual Basic sub-technique
- T1566.001 Spearphishing Attachment sub-technique
- T1566.002 Spearphishing Link sub-technique
- T1218.005 Mshta sub-technique
- T1218.011 Rundll32 sub-technique
- T1547.001 Registry Run Keys / Startup Folder sub-technique
- S0385 njRAT software (malware)
- S0363 Empire software (tool)
- S0332 Remcos software (tool)
- S0250 Koadic software (tool)
- S0262 QuasarRAT software (tool)
- T1036 Masquerading technique
- T1102 Web Service technique
- T1105 Ingress Tool Transfer technique
References
- https://web.archive.org/web/20211003035156/https://www.malwarebytes.com/resources/files/2021/02/lazyscripter.pdf MalwareBytes LazyScripter Feb 2021