More about the Machete campaign, its targets, techniques and tools involved
Has the functionality to extract stolen information from infected computers via a special USB stick that can be connected locally. The attackers introduced this feature to make sure even if the network infrastructure is compromised or destroyed, the stolen information could still be extracted. Some modules are written in Python language, which is not common for targeted attacks.
A Spanish speaking country from Latin America interested in the politics and military affairs of the mentioned targets
A targeted attack campaign with Spanish-speaking roots active since 2010. The campaign distributes malware for cyber-espionage purposes using social engineering techniques, including spear-phishing and infections via the web. Targets have been high-level individuals and organizations from Venezuela, Ecuador, Colombia, Peru, Russia, Cuba, and Spain.