CybercrimeMITRE G1026
Malteiro
0mentions, 7 days
0mentions, 30 days
nonelast mentioned
This group of cybercriminals is named Malteiroby SCILabs, they operate and distribute the URSA/Mispadu banking trojan.
CVEs in recent coverage
No CVEs named alongside this actor in the last 90 days.
Recent victims
No leak-site posts on record for this group.
ATT&CK techniques
T1027.013 Encrypted/Encoded FileT1055.001 Dynamic-link Library InjectionT1059.005 Visual BasicT1082 System Information DiscoveryT1140 Deobfuscate/Decode Files or InformationT1204.002 Malicious FileT1518.001 Security Software DiscoveryT1555 Credentials from Password StoresT1555.003 Credentials from Web BrowsersT1566.001 Spearphishing AttachmentT1614.001 System Language DiscoveryT1657 Financial Theft
Recent activity
No posts or advisories have named this actor recently.
References
- https://blog.scilabs.mx/en/cyber-threat-profile-malteiro/
- https://blog.scilabs.mx/cyber-threat-profile-malteiro/
- https://attack.mitre.org/groups/G1026
From the MISP threat-actor galaxy, MITRE ATT&CK and RansomLook (CC BY 4.0). Activity is any post or advisory Watch Floor collected that names the actor or one of its aliases.