Threat Actor

CostaRicto

Also known as: CostaRicto

CostaRicto is a suspected hacker-for-hire cyber espionage campaign that has targeted multiple industries worldwide since at least 2019. CostaRicto's targets, a large portion of which are financial institutions, are scattered across Europe, the Americas, Asia, Australia, and Africa, with a large concentration in South Asia.

0
indicators on this record

Properties

Last source
MITRE ATT&CK
STIX ID
intrusion-set--bb82e0b0-6e9c-439f-970a-4c917a74c5f2
In Signal since
initial import (Sep 2026)
Retrieved at
2026-10-18T13:40:42+00:00
Type
intrusion-set

Explore this actor's full graph with Ninja Signal

CostaRicto — Threat Actor Profile — Ninja Signal | Ninja Signal