RegistroCiberVE
All threat actors
Threat actor

Operadores no atribuidos de la campaña Bandidos/Bandook

Bandidos is the name given by ESET to an espionage campaign targeting corporate networks in Spanish-speaking countries, with a high concentration of detections in Venezuela, which used variants of the Bandook remote access Trojan. The operators have not been publicly attributed to a specific individual, group, or state.

Incidents
1
High impact
1
First seen
Jul 7, 2021
Latest seen
Jul 7, 2021

Linked incidents

spyware remote access trojan

ESET uncovers the 'Bandidos' espionage campaign using the Bandook RAT against corporate networks in Venezuela

In July 2021, ESET revealed “Bandidos,” an active cyberespionage campaign that used an updated version of the Bandook remote access Trojan. Nearly 90% of the detections (more than 200 droppers in 2021) were concentrated in Venezuela, affecting corporate networks in the manufacturing, construction, healthcare, software services, and retail sectors. The infection began with spear-phishing emails containing PDF files that linked to compressed droppers capable of stealing documents and credentials.

Redes corporativas venezolanas (manufactura, construcción, salud, servicios de software y comercio minorista)