C0004 CostaRicto

active2019-10-01 – 2020-11-01

also known asCostaRicto

CostaRicto was a suspected hacker-for-hire cyber espionage campaign that targeted multiple industries worldwide, with a large number being financial institutions. CostaRicto actors targeted organizations in Europe, the Americas, Asia, Australia, and Africa, with a large concentration in South Asia (especially India, Bangladesh, and Singapore), using custom malware, open source tools, and a complex network of proxies and SSH tunnels.

01

techniques used (10)

ATT&CK techniques this enables or maps to.

02

software used (6)

Malware and tools associated with this.

03

source

Where this definition is published.