Caliente Bandits

MISP

Type:
Unknown

Country:
Unknown

First seen:
Unknown

Details:

Caliente Bandits is a highly active threat group that targets multiple industries, including finance and entertainment. They distribute the Bandook remote access trojan using Spanish-language lures through low-volume email campaigns. The group primarily impacts individuals with Spanish surnames and conducts reconnaissance to obtain employee data. They masquerade as companies in South America and use Hotmail or Gmail email addresses.

References (1)

proofpoint.com - New Threat Actor Uses Spanish Language Lures Distribute Seldom Observed Bandook

Aliases (104)

TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721 TA2721

Metadata

ID:	577
Created:	13/01/2026 17:48
Updated:	06/03/2026 16:00