D
CyberBrazil

Malteiro

Cybercriminal groupTrackedPending verification
CyberBRA
Identification silhouette. Not drawn to scale between entries.
Fact cardConfidence · Source
System
TypeCybercriminal group
ProliferationOrigin country only
Active since2019At least 2019Med[1]
MITRE ATT&CK IDG1026High[1]
Capabilities
ATT&CK techniques used12ATT&CK v20.1High[1]
Malware and toolsMispadu1 malware and tool entries linked in ATT&CKHigh[1]
Attribution and activity
Attributed sponsorFinancially motivated; likely Brazil-basedMed[1]
TargetsMalteiro mainly targets victims throughout Latin America (particularly Mexico) and Europe (particularly Spain and Portugal).Med[1]
Notes
Malteiro is a financially motivated criminal group that is likely based in Brazil and has been active since at least November 2019. The group operates and distributes the Mispadu banking trojan via a Malware-as-a-Service (MaaS) business model. Malteiro mainly targets victims throughout Latin America (particularly Mexico) and Europe (particularly Spain and Portugal). Description adapted from MITRE ATT&CK®, © The MITRE Corporation, used under the ATT&CK Terms of Use.
Summary

Malteiro is a financially motivated criminal group that is likely based in Brazil and has been active since at least November 2019. The group operates and distributes the Mispadu banking trojan via a Malware-as-a-Service (MaaS) business model.

Draft entry. Values come from the cited public sources and are awaiting editor verification.
CompareJSON
Operators
Brazil
Sources
  1. Malteiro, Group G1026, MITRE ATT&CK
    Published/updated 2026-07-31 · Tier 2 · checked 2026-11-08
Change log
  • 2026-11-08 Entry created from MITRE ATT&CK Enterprise v20.1 (group G1026)