Home / Threat actors / Malteiro
Malteiro G1026
Updated at source on Jul 31, 2026 · View on MITRE ATT&CK
0
associated CVEs
13
Techniques
1
Malware and tools
Malteiro is a financially motivated criminal group that is likely based in Brazil and has been active since at least November 2019. The group operates and distributes the Mispadu banking trojan via a Malware-as-a-Service (MaaS) business model. Malteiro mainly targets victims throughout Latin America (particularly Mexico) and Europe (particularly Spain and Portugal).
Exploited vulnerabilities
CVEs cited by MITRE ATT&CK for this group, with the source excerpt. Records not yet published here appear without a link.
ATT&CK does not cite CVEs for this group.
Techniques by tactic
Initial Access
T1566.001 Spearphishing Attachment Execution
T1059.005 Visual BasicT1204.002 Malicious File Privilege Escalation
T1055.001 Dynamic-link Library Injection Stealth
T1027.013 Encrypted/Encoded FileT1055.001 Dynamic-link Library InjectionT1140 Deobfuscate/Decode Files or Information Credential Access
T1555 Credentials from Password StoresT1555.003 Credentials from Web Browsers Discovery
T1082 System Information DiscoveryT1518.001 Security Software DiscoveryT1614.001 System Language Discovery Impact
T1657 Financial Theft Malware and tools
- MispaduMalwareS1122
© The MITRE Corporation. ATT&CK® content reproduced and distributed with the permission of The MITRE Corporation.