← Adversaries
File · LazyScripter · Unknown · mitre-attack · refreshed 2026-10-06
LazyScripter
attack rose · 20 techniques across 6 tactics
Analyst brief
mitre-attackLazyScripter is threat group that has mainly targeted the airlines industry since at least 2018, primarily using open-source toolsets.
Kill chain
MITRE ATT&CK Enterprise · tap a technique20 techniques · 6 of 15 tactics
Resource development
4 techniquesInitial access
2 techniquesExecution
6 techniquesPersistence
1 techniqueStealth
4 techniquesCommand and control
3 techniques
select a technique
Arsenal
2 malware · 5 toolsas stated by MITRE ATT&CK · “shared by” counts roster dossiers citing the same S-id
Primary-source reports
via APTnotes · linked, never re-hostedTake it with you
keyless · no signupReferences
2 sourcesTrack LazyScripter on the wire.
This dossier is already data: the keyless actor API and a STIX 2.1 bundle. Mentions on the wire reach Telegram and RSS as they land.
Check your stack
Paste what you run: the CVEs exploited in the wild against it, and who is cited as exploiting them, with the report.
Stack checkNo key. No signup.