UnclassifiedUnknown
Caliente Bandits
Caliente Bandits is a threat actor group, tracked by Brandefense.
Also known as
- TA2721
- Techniques
- 0
- Exploited CVEs
- No CVE data
- Record updated
About Caliente Bandits.
Caliente Bandits is a highly active threat group that targets multiple industries, including finance and entertainment. They distribute the Bandook remote access trojan using Spanish-language lures through low-volume email campaigns. The group primarily impacts individuals with Spanish surnames and conducts reconnaissance to obtain employee data. They masquerade as companies in South America and use Hotmail or Gmail email addresses.
Last updated Oct 9, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.