Careto, also known as The Mask, is a cyber-espionage group first documented in 2007, and initially active until 2013. The group resurfaced with new campaigns in early 2024, demonstrating continued evolution in their tactics and toolset. Assessed with moderate confidence to be state-sponsored, with some reports suggesting ties to the Spanish government, Careto's primary motivation is cyber-espionage. What distinguishes this group is its highly sophisticated, multi-platform malware arsenal capable of targeting Windows, macOS, and Linux systems, along with its unique use of rootkits and bootkits, custom obfuscation techniques, exploitation of zero-day vulnerabilities, and direct attacks against security products to maintain stealth.

Aliases del actor

MaskThe MaskUgly FaceAPT CARETO"Spanish Speaking Country"su presencia en dominios de investigación como securelist

Actores similares

apt-caretoactor · 1the-maskactor · 1Black Maskers Armyapt · 0apt-45actor · 2apt-c-27actor · 2apt-c-01actor · 2apt-c-12actor · 1apt-18actor · 1apt-1877teamactor · 1apt-27actor · 1