File size: 4,060 Bytes
5fe70fd
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
{
    "type": "bundle",
    "id": "bundle--ada9b832-60ac-467d-bd96-010d170d0ee2",
    "spec_version": "2.0",
    "objects": [
        {
            "aliases": [
                "Machete",
                "APT-C-43",
                "El Machete"
            ],
            "x_mitre_domains": [
                "enterprise-attack"
            ],
            "x_mitre_contributors": [
                "Matias Nicolas Porolli, ESET"
            ],
            "object_marking_refs": [
                "marking-definition--fa42a846-8d90-4e51-bc29-71d5b4802168"
            ],
            "id": "intrusion-set--38863958-a201-4ce1-9dbe-539b0b6804e0",
            "type": "intrusion-set",
            "created": "2019-09-13T12:37:10.394Z",
            "created_by_ref": "identity--c78cb6e5-0c4b-4611-8297-d1b8b55e40b5",
            "external_references": [
                {
                    "external_id": "G0095",
                    "source_name": "mitre-attack",
                    "url": "https://attack.mitre.org/groups/G0095"
                },
                {
                    "source_name": "Machete",
                    "description": "(Citation: Securelist Machete Aug 2014)(Citation: ESET Machete July 2019)("
                },
                {
                    "source_name": "APT-C-43",
                    "description": "(Citation: 360 Machete Sep 2020)"
                },
                {
                    "source_name": "El Machete",
                    "description": "(Citation: Cylance Machete Mar 2017)"
                },
                {
                    "description": "The Cylance Threat Research Team. (2017, March 22). El Machete's Malware Attacks Cut Through LATAM. Retrieved September 13, 2019.",
                    "url": "https://threatvector.cylance.com/en_us/home/el-machete-malware-attacks-cut-through-latam.html",
                    "source_name": "Cylance Machete Mar 2017"
                },
                {
                    "source_name": "Securelist Machete Aug 2014",
                    "url": "https://securelist.com/el-machete/66108/",
                    "description": "Kaspersky Global Research and Analysis Team. (2014, August 20). El Machete. Retrieved September 13, 2019."
                },
                {
                    "source_name": "ESET Machete July 2019",
                    "url": "https://www.welivesecurity.com/wp-content/uploads/2019/08/ESET_Machete.pdf",
                    "description": "ESET. (2019, July). MACHETE JUST GOT SHARPER Venezuelan government institutions under attack. Retrieved September 13, 2019."
                },
                {
                    "source_name": "360 Machete Sep 2020",
                    "url": "https://blog.360totalsecurity.com/en/apt-c-43-steals-venezuelan-military-secrets-to-provide-intelligence-support-for-the-reactionaries-hpreact-campaign/",
                    "description": "kate. (2020, September 25). APT-C-43 steals Venezuelan military secrets to provide intelligence support for the reactionaries \u2014 HpReact campaign. Retrieved November 20, 2020."
                }
            ],
            "modified": "2021-10-06T19:26:47.988Z",
            "name": "Machete",
            "description": "[Machete](https://attack.mitre.org/groups/G0095) is a suspected Spanish-speaking cyber espionage group that has been active since at least 2010. It has primarily focused its operations within Latin America, with a particular emphasis on Venezuela, but also in the US, Europe, Russia, and parts of Asia. [Machete](https://attack.mitre.org/groups/G0095) generally targets high-profile organizations such as government institutions, intelligence services, and military units, as well as telecommunications and power companies.(Citation: Cylance Machete Mar 2017)(Citation: Securelist Machete Aug 2014)(Citation: ESET Machete July 2019)(Citation: 360 Machete Sep 2020)",
            "x_mitre_version": "2.0",
            "x_mitre_modified_by_ref": "identity--c78cb6e5-0c4b-4611-8297-d1b8b55e40b5"
        }
    ]
}