coldbraid

Malteiro

Malteiro is a financially motivated criminal group that is likely based in Brazil and has been active since at least November 2019. The group operates and distributes the Mispadu banking trojan via a Malware-as-a-Service (MaaS) business model. Malteiro mainly targets victims throughout Latin America (particularly Mexico) and Europe (particularly Spain and Portugal).

ATT&CK ID
G1026
Origin
Brazil
Techniques
11
Tools
1

Techniques

Initial Access

Phishing

Execution

Command and Scripting InterpreterUser Execution

Privilege Escalation

Process Injection

Stealth

Obfuscated Files or InformationProcess InjectionDeobfuscate/Decode Files or Information

Credential Access

Credentials from Password Stores

Discovery

System Information DiscoverySoftware DiscoverySystem Location Discovery

Impact

Financial Theft

Software

Mispadu