AdversaryGraph public intelligence page

This page is part of Threat Matrix, the public browser workspace for the main AdversaryGraph platform. Use it for ATT&CK pivots, actor and technique context, similarity leads, detection coverage review, and analyst-ready investigation paths.

Validation disclaimer: TTP overlap, actor similarity, generated summaries, and coverage findings are investigation leads, not attribution proof or operational validation without analyst review.

Main AdversaryGraph project Documentation Malware Analysis GitHub

G1013 · 9 ATT&CK techniques · 0 correlated reports

Metador

Aliases: None listed

Metador is a suspected cyber espionage group that was first reported in September 2022. Metador has targeted a limited number of telecommunication companies, internet service providers, and universities in the Middle East and Africa. Security researchers named the group Metador based on the "I am meta" string in one of the group's malware samples and the expectation of Spanish-language responses from C2 servers.

Open interactive actor investigation

ATT&CK techniques

T1071.001
Web ProtocolsT1059.003
Windows Command ShellT1588.001
MalwareT1546.003
Windows Management Instrumentation Event SubscriptionT1027.013
Encrypted/Encoded FileT1070.004
File DeletionT1095
Non-Application Layer ProtocolT1588.002
ToolT1105
Ingress Tool Transfer

Correlated CTI and IR reports

Continue the investigation

Interactive AdversaryGraph AdversaryGraph documentation CTI Analyst Field Manual Israel Threat Actors CTI Anomaly Detection Atlas Insider Threat Detection Guide 1200km Medium research