El Machete
Observation period
11
Techniques
0
Reports
- Latest observed activity
- No dated reports available
- First observed
- —
Profile
El Machete is one of these threats that was first publicly disclosed and named by Kaspersky here. We’ve found that this group has continued to operate successfully, predominantly in Latin America, since 2014. All attackers simply moved to new C2 infrastructure, based largely around dynamic DNS domains, in addition to making minimal changes to the malware in order to evade signature-based detection.
Relevance for Germany, Austria and Switzerland
high
Assessment based on target countries according to MISP Galaxy (CFR Cyber Operations Tracker).
Target sectors according to source
- Military
- Government
Target countries according to source Venezuela, Russia, Cuba, China, Belgium, Ecuador, Brazil, Spain, Germany, France, Colombia, Peru, Sweden, United States, Malaysia
Aliases
- Machete
- machete-apt
- APT-C-43
MITRE ATT&CK techniques
Observed techniques per ATT&CK Enterprise and ICS. Each technique links to the ATT&CK knowledge base.