LazyScripter — APT Profile
LazyScripter is threat group that has mainly targeted the airlines industry since at least 2018, primarily using open-source toolsets.Description reproduced from MITRE ATT&CK. © The MITRE Corporation, reproduced and distributed with permission.
Tools & malware
- Empire Post-Exploitation Framework
- Koadic Post-Exploitation Framework
- KOCTOPUS Loader
- ngrok Tunneling Tool
- njRAT Remote Access Trojan
- QuasarRAT Remote Access Trojan
- Remcos Remote Access Trojan
Vendor research
- LazyScripter: From Empire to double RAT Malwarebytes