LazyScripter

Unattributed cyber threat groupTrackedPending verification

CyberUNK

Identification silhouette. Not drawn to scale between entries.

Fact cardConfidence · Source

System

TypeUnattributed cyber threat group

ProliferationOrigin country only

Active since2018At least 2018Med^[1]

MITRE ATT&CK IDG0140High^[1]

Capabilities

ATT&CK techniques used20ATT&CK v20.1High^[1]

Malware and toolsEmpire, Koadic, KOCTOPUS, ngrok, njRAT, QuasarRAT, Remcos7 malware and tool entries linked in ATT&CKHigh^[1]

Attribution and activity

Attributed sponsorNot attributed by ATT&CKLow^[1]

TargetsLazyScripter is threat group that has mainly targeted the airlines industry since at least 2018, primarily using open-source toolsets.Med^[1]

Notes

LazyScripter is threat group that has mainly targeted the airlines industry since at least 2018, primarily using open-source toolsets. Description adapted from MITRE ATT&CK®, © The MITRE Corporation, used under the ATT&CK Terms of Use.

Summary

LazyScripter is threat group that has mainly targeted the airlines industry since at least 2018, primarily using open-source toolsets.

Draft entry. Values come from the cited public sources and are awaiting editor verification.

Compare JSON

Operators

Sources

LazyScripter, Group G0140, MITRE ATT&CK
Published/updated 2026-07-31 · Tier 2 · checked 2026-11-08

Change log

2026-11-08 Entry created from MITRE ATT&CK Enterprise v20.1 (group G0140)