LazyScripter is a threat group that emerged in 2018, primarily known for its extensive reliance on open-source tools and scripting techniques in its operations. The group is assessed with high confidence to be of Middle Eastern origin, with some researchers attributing them specifically to Yemen. Their primary motivation is the theft of private information and business intelligence, which they likely use for further targeted attacks. Distinctively, LazyScripter's operational model involves small-scale spam campaigns to distribute malware, and they have demonstrated an evolution in their toolsets, moving from initial use of PowerShell Empire to more recently employing KOCTOPUS, a loader for Octopus and Koadic remote access Trojans. Despite similarities in techniques with groups like APT28, OilRig, and MuddyWater, LazyScripter is considered a distinct entity due to notable differences in their campaign execution and tool usage.

Aliases del actor

APT LAZYSCRIPTER

Actores similares

apt-lazyscripteractor · 1apt-45actor · 2apt-c-27actor · 2apt-c-01actor · 2apt-c-12actor · 1apt-18actor · 1apt-1877teamactor · 1apt-27actor · 1apt-30actor · 1apt-38actor · 1