← All Threat Actors
Threat Actor Profile

Machete

APT-C-43 ATK 97 El Machete G0095 TAG-NS1 TEMP.Andromeda
▲ High Threat
[Machete](https://attack.mitre.org/groups/G0095) is a suspected Spanish-speaking cyber espionage group that has been active since at least 2010. It has primarily focused its operations within Latin America, with a particular emphasis on Venezuela, but also in the US, Europe, Russia, and parts of Asia. [Machete](https://attack.mitre.org/groups/G0095) generally targets high-profile organizations such as government institutions, intelligence services, and military units, as well as telecommunications and power companies.(Citation: Cylance Machete Mar 2017)(Citation: Securelist Machete Aug 2014)(Citation: ESET Machete July 2019)(Citation: 360 Machete Sep 2020)
Origin

Known TTPs

Malicious File
Spearphishing Link
Windows Command Shell
Visual Basic
Python
Scheduled Task
Match Legitimate Resource Name or Location
Malicious Link
Drive-by Compromise
Spearphishing Attachment
Msiexec

External Resources

CISA Advisories ↗

Related Intelligence

Hacking the mainframe…

LINK COPIED TO CLIPBOARD