Threat Actor

CostaRicto

Also known as: CostaRicto

[CostaRicto](https://attack.mitre.org/groups/G0132) is a suspected hacker-for-hire cyber espionage campaign that has targeted multiple industries worldwide since at least 2019. [CostaRicto](https://attack.mitre.org/groups/G0132)'s targets, a large portion of which are financial institutions, are scattered across Europe, the Americas, Asia, Australia, and Africa, with a large concentration in South Asia.(Citation: BlackBerry CostaRicto November 2020)

Properties

stix_id
intrusion-set--bb82e0b0-6e9c-439f-970a-4c917a74c5f2
signal_observed_at
2026-09-11T17:55:00+00:00
type
intrusion-set

Explore this actor's full graph with Ninja Signal

CostaRicto — Threat Actor Profile — Ninja Signal | Ninja Signal