CostaRicto
Campaign · ATTACK:enterprise:C0004
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:C0004",
"title": "CostaRicto",
"type": "Campaign",
"source_url": "https://attack.mitre.org/campaigns/C0004",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "campaign--f9cc545e-b0ef-4b92-8884-a3a4427609f6",
"external_id": "C0004",
"domain": "enterprise",
"created": "2022-09-15T17:25:38.020Z",
"modified": "2026-07-31T18:47:33.745Z",
"version": "1.0",
"aliases": [
"CostaRicto"
],
"tactics": [
],
"source_references": [
{
"source_name": "BlackBerry CostaRicto November 2020",
"url": "https://blogs.blackberry.com/en/2020/11/the-costaricto-campaign-cyber-espionage-outsourced"
}
]
}Explicit source assertions (16)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:C0004 → uses → ATTACK:enterprise:S0194
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--01bd79bd-651b-46f4-8a2e-dbbedd76f213
BlackBerry CostaRicto November 2020ATTACK:enterprise:C0004 → uses → ATTACK:enterprise:T1046
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--069bd80b-9f39-46c6-a9dc-b61e42a2f91e
BlackBerry CostaRicto November 2020ATTACK:enterprise:C0004 → uses → ATTACK:enterprise:T1105
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--16cdc452-d4dc-43f7-be53-dc6b62135d20
BlackBerry CostaRicto November 2020ATTACK:enterprise:C0004 → uses → ATTACK:enterprise:T1090.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--2b6b93eb-6664-4a70-82a9-e56a416b9e61
BlackBerry CostaRicto November 2020ATTACK:enterprise:C0004 → uses → ATTACK:enterprise:S0183
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--685557c9-181e-4702-8866-40ddc524c118
BlackBerry CostaRicto November 2020ATTACK:enterprise:C0004 → uses → ATTACK:enterprise:S0615
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--699be82f-c548-4e2b-a33c-f91ceed1bf9f
BlackBerry CostaRicto November 2020ATTACK:enterprise:C0004 → uses → ATTACK:enterprise:T1053.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--7d18e839-3e68-4168-8245-4278c6f0dc01
BlackBerry CostaRicto November 2020ATTACK:enterprise:C0004 → uses → ATTACK:enterprise:S0029
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--7edbf524-1324-4c2b-b3ea-8bc1007943c4
BlackBerry CostaRicto November 2020ATTACK:enterprise:C0004 → uses → ATTACK:enterprise:T1588.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--83b4190b-31aa-4f90-a397-624b89fb2f6f
BlackBerry CostaRicto November 2020ATTACK:enterprise:C0004 → uses → ATTACK:enterprise:S0614
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8b5037a6-8899-4180-bcb3-fbcfbd83f3e1
BlackBerry CostaRicto November 2020ATTACK:enterprise:C0004 → uses → ATTACK:enterprise:T1133
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8f354951-cd88-4193-b3d5-b95038938c7f
BlackBerry CostaRicto November 2020ATTACK:enterprise:C0004 → uses → ATTACK:enterprise:T1583.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--9de77d26-6424-4ee8-bd7d-1ae705020c55
BlackBerry CostaRicto November 2020ATTACK:enterprise:C0004 → uses → ATTACK:enterprise:T1587.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b865d0be-c46c-4677-b66e-fe19e1fa9f31
BlackBerry CostaRicto November 2020ATTACK:enterprise:C0004 → uses → ATTACK:enterprise:T1005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c3c9a7e7-4dbb-487e-b546-7bec3f929b3b
BlackBerry CostaRicto November 2020ATTACK:enterprise:C0004 → uses → ATTACK:enterprise:S0613
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c6c88847-a34c-4e02-a3ab-93daa68744fd
BlackBerry CostaRicto November 2020ATTACK:enterprise:C0004 → uses → ATTACK:enterprise:T1572
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--dfd947d6-60c1-4cb1-90ff-0111ccaddd1a
BlackBerry CostaRicto November 2020