Unknownconfidence: 50G0095
El MacheteEl Machete
Also known as: Machete · machete-apt · APT-C-43 · G0095 · El Machete
Known aliases
5
Target sectors
2
Attribution
State-sponsored
Profile
El Machete is one of these threats that was first publicly disclosed and named by Kaspersky here. We’ve found that this group has continued to operate successfully, predominantly in Latin America, since 2014. All attackers simply moved to new C2 infrastructure, based largely around dynamic DNS domains, in addition to making minimal changes to the malware in order to evade signature-based detection.
Aliases· 5
Machetemachete-aptAPT-C-43El Machete
Target sectors· 2
MilitaryGovernment
Known victims· 15
- Venezuela
- Russia
- Cuba
- China
- Belgium
- Ecuador
- Brazil
- Spain
- Germany
- France
- Colombia
- Peru
MITRE ATT&CK Group crosswalk
References
- https://attack.mitre.org/groups/G0095/
- https://securelist.com/el-machete/66108/
- https://www.cylance.com/en_us/blog/el-machete-malware-attacks-cut-through-latam.html
- https://www.cfr.org/interactive/cyber-operations/machete
- https://threatvector.cylance.com/en_us/home/el-machete-malware-attacks-cut-through-latam.html
- https://blog.360totalsecurity.com/en/apt-c-43-steals-venezuelan-military-secrets-to-provide-intelligence-support-for-the-reactionaries-hpreact-campaign/
Related by meaning· 6
Nearest entities by semantic similarity across the cs-graph corpus.