LazyScripter
LazyScripter is threat group that has mainly targeted the airlines industry since at least 2018, primarily using open-source toolsets.
techniques · ATT&CK
LazyScripter
LazyScripter is a threat group targeting the airline industry since 2018, using open-source tools.
unknown
Kill-chain playbook6
Monitor for suspicious domain registrations and malicious software uploads.
Inspect email attachments and links to detect suspicious spearphishing attempts.
Monitor user-initiated malicious links and files to detect suspicious activity.
Detect persistence attempts by monitoring Registry Run Keys and Startup Folder modifications.
- 05
Defense Evasion
Detect masquerading attempts by monitoring suspicious process names and Mshta execution.
Detect C2 communication by monitoring suspicious DNS queries and Web Service usage.
See also5
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.