aol.pm

LazyScripter

IntrusionSet · ATTACK:enterprise:G0140

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance
{
  "id": "ATTACK:enterprise:G0140",
  "title": "LazyScripter",
  "type": "IntrusionSet",
  "source_url": "https://attack.mitre.org/groups/G0140",
  "snapshot": "enterprise-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "intrusion-set--abc5a1d4-f0dc-49d1-88a1-4a80e478bb03",
  "external_id": "G0140",
  "domain": "enterprise",
  "created": "2021-11-24T19:26:27.305Z",
  "modified": "2026-07-31T18:48:12.417Z",
  "version": "1.1",
  "aliases": [
    "LazyScripter"
  ],
  "tactics": [

  ],
  "source_references": [
    {
      "source_name": "LazyScripter"
    },
    {
      "source_name": "MalwareBytes LazyScripter Feb 2021",
      "url": "https://web.archive.org/web/20211003035156/https://www.malwarebytes.com/resources/files/2021/02/lazyscripter.pdf"
    }
  ]
}

Explicit source assertions (27)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.

ATTACK:enterprise:G0140 → uses → ATTACK:enterprise:S0332

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--22d01d2c-6c2e-4e59-98ac-393aef16ffe3

MalwareBytes LazyScripter Feb 2021

ATTACK:enterprise:G0140 → uses → ATTACK:enterprise:T1204.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--2f146c3d-5dd4-42e2-a62b-04adcb36485c

MalwareBytes LazyScripter Feb 2021

ATTACK:enterprise:G0140 → uses → ATTACK:enterprise:T1218.005

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--3766cf55-568a-410f-8968-7a4adac96f77

MalwareBytes LazyScripter Feb 2021

ATTACK:enterprise:G0140 → uses → ATTACK:enterprise:T1608.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--424ae88f-7405-4cab-9065-4d1e024a25c8

MalwareBytes LazyScripter Feb 2021

ATTACK:enterprise:G0140 → uses → ATTACK:enterprise:T1204.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--4995fdc6-d705-48dc-a2e3-c6797ba2439f

MalwareBytes LazyScripter Feb 2021

ATTACK:enterprise:G0140 → uses → ATTACK:enterprise:T1102

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--4e348b41-b607-4227-8734-06ef01d40f27

MalwareBytes LazyScripter Feb 2021

ATTACK:enterprise:G0140 → uses → ATTACK:enterprise:T1059.007

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--67d072c0-3439-4a61-9a67-fb3f2b72d04e

MalwareBytes LazyScripter Feb 2021

ATTACK:enterprise:G0140 → uses → ATTACK:enterprise:T1583.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--691d0d23-9d20-470f-8483-73c7e10027a3

MalwareBytes LazyScripter Feb 2021

ATTACK:enterprise:G0140 → uses → ATTACK:enterprise:T1059.005

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--6f1ea286-593c-4255-9ea8-708e04184987

MalwareBytes LazyScripter Feb 2021

ATTACK:enterprise:G0140 → uses → ATTACK:enterprise:T1071.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--86e0245b-787c-4cf8-9399-531d64529d4d

MalwareBytes LazyScripter Feb 2021

ATTACK:enterprise:G0140 → uses → ATTACK:enterprise:S0262

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--878ff6f7-d372-4559-a114-8858eb2682d4

MalwareBytes LazyScripter Feb 2021

ATTACK:enterprise:G0140 → uses → ATTACK:enterprise:T1588.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--89446c0a-0f1b-4d04-92fb-a04c6b16e474

MalwareBytes LazyScripter Feb 2021

ATTACK:enterprise:G0140 → uses → ATTACK:enterprise:T1105

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--928f19e8-6174-47c9-b44a-87477d89bdc9

MalwareBytes LazyScripter Feb 2021

ATTACK:enterprise:G0140 → uses → ATTACK:enterprise:T1036

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--99717cce-1987-4ca1-8df2-c6ec6ce17cf5

MalwareBytes LazyScripter Feb 2021

ATTACK:enterprise:G0140 → uses → ATTACK:enterprise:T1566.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--9cd8ce7f-7440-4ac4-b4cf-a758dd158672

MalwareBytes LazyScripter Feb 2021

ATTACK:enterprise:G0140 → uses → ATTACK:enterprise:T1059.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--9ee8a8fb-798e-4fa0-9ae0-ab96e75c9f4e

MalwareBytes LazyScripter Feb 2021

ATTACK:enterprise:G0140 → uses → ATTACK:enterprise:S0385

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--b036723f-a215-4c04-a625-e57faac4d6b9

MalwareBytes LazyScripter Feb 2021

ATTACK:enterprise:G0140 → uses → ATTACK:enterprise:S0508

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--b3a2df5e-af39-4129-a63c-7dee0e5986bb

MalwareBytes LazyScripter Feb 2021

ATTACK:enterprise:G0140 → uses → ATTACK:enterprise:S0363

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--ba2b3c40-f9d2-4663-a5bd-3bb158553572

MalwareBytes LazyScripter Feb 2021

ATTACK:enterprise:G0140 → uses → ATTACK:enterprise:T1059.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--bc0a285a-fcee-4a9a-9d74-9f723d6c20c2

MalwareBytes LazyScripter Feb 2021

ATTACK:enterprise:G0140 → uses → ATTACK:enterprise:T1027.010

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--c18296e4-93a2-4f75-8bcb-4a05692d9940

MalwareBytes LazyScripter Feb 2021

ATTACK:enterprise:G0140 → uses → ATTACK:enterprise:S0250

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--c7972596-a87d-48fd-bd6f-f140e16f99a6

MalwareBytes LazyScripter Feb 2021

ATTACK:enterprise:G0140 → uses → ATTACK:enterprise:T1547.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--cb3117b7-3679-424d-bfb4-b28699cbba02

MalwareBytes LazyScripter Feb 2021

ATTACK:enterprise:G0140 → uses → ATTACK:enterprise:T1218.011

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--ced83af5-76c5-4319-8d30-9682f71fe84f

MalwareBytes LazyScripter Feb 2021

ATTACK:enterprise:G0140 → uses → ATTACK:enterprise:T1566.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--e4946803-e448-4c85-902b-100e4d627ec3

MalwareBytes LazyScripter Feb 2021

ATTACK:enterprise:G0140 → uses → ATTACK:enterprise:S0669

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--e6289aac-7035-465c-acc3-ad6963509ad4

MalwareBytes LazyScripter Feb 2021

ATTACK:enterprise:G0140 → uses → ATTACK:enterprise:T1583.006

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--ff9932dc-6afa-4aa6-834b-4ff1ac6d96bb

MalwareBytes LazyScripter Feb 2021

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.