MITRE ATT&CKgroup
G0095 Machete
- Domain
- enterprise
- Aliases
- APT-C-43, El Machete
- Version
- 2.0
- Created
- 2019-09-13
Description
Machete is a suspected Spanish-speaking cyber espionage group that has been active since at least 2010. It has primarily focused its operations within Latin America, with a particular emphasis on Venezuela, but also in the US, Europe, Russia, and parts of Asia. Machete generally targets high-profile organizations such as government institutions, intelligence services, and military units, as well as telecommunications and power companies.
Related
Uses · MITRE ATT&CK (12)
- T1204.001 Malicious Link sub-technique
- T1204.002 Malicious File sub-technique
- T1059.003 Windows Command Shell sub-technique
- T1059.005 Visual Basic sub-technique
- T1059.006 Python sub-technique
- T1566.001 Spearphishing Attachment sub-technique
- T1566.002 Spearphishing Link sub-technique
- T1036.005 Match Legitimate Resource Name or Location sub-technique
- T1218.007 Msiexec sub-technique
- T1053.005 Scheduled Task sub-technique
- S0409 Machete software (malware)
- T1189 Drive-by Compromise technique
References
- https://threatvector.cylance.com/en_us/home/el-machete-malware-attacks-cut-through-latam.html Cylance Machete Mar 2017
- https://securelist.com/el-machete/66108/ Securelist Machete Aug 2014
- https://www.welivesecurity.com/wp-content/uploads/2019/08/ESET_Machete.pdf ESET Machete July 2019
- https://blog.360totalsecurity.com/en/apt-c-43-steals-venezuelan-military-secrets-to-provide-intelligence-support-for-the-reactionaries-hpreact-campaign/ 360 Machete Sep 2020