← All Threat Actors
Threat Actor Profile

Malteiro

G1026
▲ High Threat
This group of cybercriminals is named Malteiroby SCILabs, they operate and distribute the URSA/Mispadu banking trojan.
Origin

Known TTPs

Malicious File
Credentials from Web Browsers
Dynamic-link Library Injection
Financial Theft
System Information Discovery
Visual Basic
Encrypted/Encoded File
Security Software Discovery
Spearphishing Attachment
Credentials from Password Stores
Deobfuscate/Decode Files or Information
System Language Discovery

External Resources

CISA Advisories ↗

Related Intelligence

Hacking the mainframe…

LINK COPIED TO CLIPBOARD