CostaRicto

Reports per quarter

CVEs named in reports

• CVE-2021-31979 KEV
• CVE-2021-33771 KEV

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

1. 6 April 2026

   costricto mercenary Outsourced Cyber Spying hackers espionage

   date ORKL added it fromORKL

   Archived copy on ORKL Detailsfor costricto mercenary Outsourced Cyber Spying hackers espionage

2. 26 October 2021

   Mercenary APTs – An Exploration

   date in the title fromORKL

   The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Mercenary APTs – An Exploration

3. 26 October 2021

   Spam campaign using Discord to host - CYJAX

   Malpedia library date cyjax fromORKLCCS '25 data

   Archived copy on ORKL Detailsfor Spam campaign using Discord to host - CYJAX

4. 13 May 2021

   Threat Thursday- SombRAT — Always Leave Yourself a Backdoor

   date in the title fromORKL

   The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Threat Thursday- SombRAT — Always Leave Yourself a Backdoor

5. 12 November 2020

   The CostaRicto Campaign- Cyber-Espionage Outsourced

   date in the title fromORKL

   The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor The CostaRicto Campaign- Cyber-Espionage Outsourced

6. 12 November 2020

   The CostaRicto Campaign_ Cyber-Espionage Outsourced

   date in the CCS '25 data BlackBerry fromORKLCCS '25 data

   The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor The CostaRicto Campaign_ Cyber-Espionage Outsourced

Newest first. Details opens the report in Explore.