Opening Forensia workspaceacquiring
Loading the current evidence view. Navigation and account controls remain available.
Loading recent evidenceacquiring
Threat actors
Loading the current evidence view. Navigation and account controls remain available.
Also known as: APT-C-43, El Machete
11
techniques
1
software
10,138
corpus matches
profile
Machete is a suspected Spanish-speaking cyber espionage group that has been active since at least 2010. It has primarily focused its operations within Latin America, with a particular emphasis on Venezuela, but also in the US, Europe, Russia, and parts of Asia. Machete generally targets high-profile organizations such as government institutions, intelligence services, and military units, as well as telecommunications and power companies.
techniques
11 attributed · most-instrumented first
software
1 malware & tools attributed
Machete
S0409
read this carefully
10,138 corpus matches is not attribution
That count is indicators which exhibit techniques Machete is known to use. Many unrelated operators use the same techniques. Treat it as a shared-technique signal for hunting, never as first-party attribution to this group.
indicators exhibiting these techniques
Top by severity: each resolves to its own verdict.
execution · persistence · privilege-escalation
showing 30 of 10,138
known aliases
Vendors name the same group differently. Searching any alias reaches this profile.