Skip to content
skopnix
Section B · Adversaries · Dossier
← Adversaries

File · Malteiro · Unknown · misp-galaxy + mitre-attack · refreshed 2026-10-06

Malteiro

MITRE G1026 ↗

Malteiro — ATT&CK roseMA

attack rose · 12 techniques across 6 tactics

Analyst brief

misp-galaxy + mitre-attack

This group of cybercriminals is named Malteiroby SCILabs, they operate and distribute the URSA/Mispadu banking trojan.

Kill chain

MITRE ATT&CK Enterprise · tap a technique

12 techniques · 6 of 15 tactics

  1. Initial access

    1 technique

  2. Execution

    2 techniques

  3. Stealth

    3 techniques

  4. Credential access

    2 techniques

  5. Discovery

    3 techniques

  6. Impact

    1 technique

select a technique

Arsenal

1 malware
Malware
Malware · 1ATT&CK
MispaduS1122 ↗

as stated by MITRE ATT&CK · “shared by” counts roster dossiers citing the same S-id

Take it with you

keyless · no signup

References

3 sources
  1. 1.blog.scilabs.mx/en/cyber-threat-profile-malteiro
  2. 2.blog.scilabs.mx/cyber-threat-profile-malteiro
  3. 3.attack.mitre.org/groups/G1026

Track Malteiro on the wire.

This dossier is already data: the keyless actor API and a STIX 2.1 bundle. Mentions on the wire reach Telegram and RSS as they land.

Follow on TelegramKEV RSSAPI

Check your stack

Paste what you run: the CVEs exploited in the wild against it, and who is cited as exploiting them, with the report.

Stack checkNo key. No signup.