Introduction
Machete is a suspected Spanish-speaking cyber espionage group that has been active since at least 2010. It has primarily focused its operations within Latin America, with a particular emphasis on Venezuela, but also in the US, Europe, Russia, and parts of Asia. Machete generally targets high-profile organizations such as government institutions, intelligence services, and military units, as well as telecommunications and power companies. Cylance Machete Mar 2017 Securelist Machete Aug 2014 ESET Machete July 2019 360 Machete Sep 2020
Activities and Tactics
Targeted Sectors: Military, Government
Country of Origin: 🏳️ Unknown
Incident Type: Espionage
Suspected Victims: Venezuela, Russia, Cuba, China, Belgium, Ecuador, Brazil, Spain, Germany, France…
Notable Campaigns
Information pending cataloguing.
Tactics, Techniques, and Procedures (TTPs)
Information pending cataloguing.
Notable Indicators of Compromise (IOCs)
No curated IOCs are currently published for this actor. This section will be updated when stable, attributable indicators are available.
Malware and Tools
Information pending cataloguing.
Attribution and Evidence
Country of Origin: Unknown Additional attribution information pending cataloguing.
References
[1] MITRE ATT&CK MITRE ATT&CK entry [2] Cylance Machete Mar 2017 [3] Securelist Machete Aug 2014 [4] ESET Machete July 2019 [5] 360 Machete Sep 2020