CostaRicto
CostaRicto is a cybercrime syndicate with a financial motive, tracked by Brandefense. It targets 8 sectors, including Finance and Healthcare, in 13 countries, including the United States and India. It uses 39 MITRE ATT&CK techniques and exploits 1 known CVE.
- Techniques
- 39
- Exploited CVEs
- 1
- First seen
- Jan 1, 2017
- Last seen
- Feb 1, 2021
- Record updated
Who They Target.
About CostaRicto.
CostaRicto is a suspected hacker-for-hire cyber espionage campaign that has targeted multiple industries worldwide since at least 2019. CostaRicto's targets, a large portion of which are financial institutions, are scattered across Europe, the Americas, Asia, Australia, and Africa, with a large concentration in South Asia.
Last updated Sep 19, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.