Home / Threat actors / LazyScripter
LazyScripter G0140
Updated at source on Jul 31, 2026 · View on MITRE ATT&CK
0
associated CVEs
21
Techniques
7
Malware and tools
LazyScripter is threat group that has mainly targeted the airlines industry since at least 2018, primarily using open-source toolsets.
Exploited vulnerabilities
CVEs cited by MITRE ATT&CK for this group, with the source excerpt. Records not yet published here appear without a link.
ATT&CK does not cite CVEs for this group.
Techniques by tactic
Resource Development
T1583.001 DomainsT1583.006 Web ServicesT1588.001 MalwareT1608.001 Upload Malware Initial Access
T1566.001 Spearphishing AttachmentT1566.002 Spearphishing Link Execution
T1059.001 PowerShellT1059.003 Windows Command ShellT1059.005 Visual BasicT1059.007 JavaScriptT1204.001 Malicious LinkT1204.002 Malicious File Persistence
T1547.001 Registry Run Keys / Startup Folder Privilege Escalation
T1547.001 Registry Run Keys / Startup Folder Stealth
T1027.010 Command ObfuscationT1036 MasqueradingT1218.005 MshtaT1218.011 Rundll32 Command and Control
T1071.004 DNST1102 Web ServiceT1105 Ingress Tool Transfer © The MITRE Corporation. ATT&CK® content reproduced and distributed with the permission of The MITRE Corporation.