G0095 · 18 ATT&CK techniques · 0 correlated reports

Machete

Aliases: APT-C-43, El Machete

Machete is a suspected Spanish-speaking cyber espionage group that has been active since at least 2010. It has primarily focused its operations within Latin America, with a particular emphasis on Venezuela, but also in the US, Europe, Russia, and parts of Asia. Machete generally targets high-profile organizations such as government institutions, intelligence services, and military units, as well as telecommunications and power companies.

Open interactive actor investigation

ATT&CK techniques

T1204.002
Malicious File T1566.002
Spearphishing Link T1059.003
Windows Command Shell T1059.005
Visual Basic T1059.006
Python T1053.005
Scheduled Task T1036.005
Match Legitimate Name or Location T1204.001
Malicious Link T1189
Drive-by Compromise T1566.001
Spearphishing Attachment T1218.007
Msiexec T1027
Obfuscated Files or Information T1025
Data from Removable Media T1547.001
Registry Run Keys / Startup Folder T1071.001
Web Protocols T1074.001
Local Data Staging T1071.002
File Transfer Protocols T1568.001
Fast Flux DNS

Correlated CTI and IR reports

Continue the investigation

Interactive ThreatMapper ThreatMapper documentation CTI Analyst Field Manual Israel Threat Actors CTI Anomaly Detection Atlas ITDR Handbook 1200km Medium research