Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 13:39:29 UTC
Home > List all groups > List all tools > List all groups using tool Empoder
 Tool: Empoder
Names Empoder
Category Malware
Type Loader
Description
(Malwarebytes) Prior to using Koadic as the main RAT this actor has used EmpireProject as its
main toolset. To load PowerShell Empire the actor has used its Empire Loader which we call
Empoder.
Information <https://resources.malwarebytes.com/files/2021/02/LazyScripter.pdf>
Last change to this tool card: 19 April 2021
Download this tool card in JSON format
All groups using tool Empoder
Changed Name Country Observed
APT groups
  LazyScripter [Unknown] 2018  
1 group listed (1 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=4b8e3440-e43d-435f-b180-1b4e60192cc0
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=4b8e3440-e43d-435f-b180-1b4e60192cc0
Page 1 of 1