Operation Spalax
Campaign · ATTACK:enterprise:C0005
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:C0005",
"title": "Operation Spalax",
"type": "Campaign",
"source_url": "https://attack.mitre.org/campaigns/C0005",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "campaign--4c840263-bbda-440d-a22b-674679ddebf1",
"external_id": "C0005",
"domain": "enterprise",
"created": "2022-09-16T15:32:41.893Z",
"modified": "2026-07-31T18:47:21.598Z",
"version": "1.1",
"aliases": [
"Operation Spalax"
],
"tactics": [
],
"source_references": [
{
"source_name": "ESET Operation Spalax Jan 2021",
"url": "https://www.welivesecurity.com/2021/01/12/operation-spalax-targeted-malware-attacks-colombia/"
}
]
}Explicit source assertions (19)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:C0005 → uses → ATTACK:enterprise:T1588.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--13a41ddf-24f2-4c73-a047-7093f94a2573
ESET Operation Spalax Jan 2021ATTACK:enterprise:C0005 → uses → ATTACK:enterprise:T1583.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--168c9371-c88c-45bf-9256-df78683685a2
ESET Operation Spalax Jan 2021ATTACK:enterprise:C0005 → uses → ATTACK:enterprise:T1027.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--1aad8f36-aec7-4210-8edb-7ad3dd14f5ed
ESET Operation Spalax Jan 2021ATTACK:enterprise:C0005 → uses → ATTACK:enterprise:T1588.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--1ae7391e-c622-45ee-8f8d-dca29b8bfea8
ESET Operation Spalax Jan 2021ATTACK:enterprise:C0005 → uses → ATTACK:enterprise:T1568
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--1e04ed60-7e43-4bad-a4c2-462b0b001dda
ESET Operation Spalax Jan 2021ATTACK:enterprise:C0005 → uses → ATTACK:enterprise:T1140
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--25446e74-d461-4113-8ff9-9d6984696680
ESET Operation Spalax Jan 2021ATTACK:enterprise:C0005 → uses → ATTACK:enterprise:T1059
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--2b4b6861-7143-4155-aaac-60213a314abd
ESET Operation Spalax Jan 2021ATTACK:enterprise:C0005 → uses → ATTACK:enterprise:T1204.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3445ad37-1738-45c3-aabd-dcc048d2ad2d
ESET Operation Spalax Jan 2021ATTACK:enterprise:C0005 → uses → ATTACK:enterprise:T1566.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--386d6f27-a0a6-44c9-bd03-8a332c5ce9e2
ESET Operation Spalax Jan 2021ATTACK:enterprise:C0005 → uses → ATTACK:enterprise:T1102
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3bdacd96-1c94-4af2-b0b3-d44542c31ccd
ESET Operation Spalax Jan 2021ATTACK:enterprise:C0005 → uses → ATTACK:enterprise:T1027.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3da56da6-08fe-406b-bd0d-cd4f72dd67f4
ESET Operation Spalax Jan 2021ATTACK:enterprise:C0005 → uses → ATTACK:enterprise:T1608.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3de46cc5-5049-4105-8fcc-ede3f51f30c5
ESET Operation Spalax Jan 2021ATTACK:enterprise:C0005 → uses → ATTACK:enterprise:T1497
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3ff416c3-63dd-4050-82f9-fcf4820a7b12
ESET Operation Spalax Jan 2021ATTACK:enterprise:C0005 → uses → ATTACK:enterprise:T1204.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--48cff69b-577c-4837-b894-95b19f255134
ESET Operation Spalax Jan 2021ATTACK:enterprise:C0005 → uses → ATTACK:enterprise:T1566.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--85b4d635-f5f4-4f4f-abc2-31203cad496d
ESET Operation Spalax Jan 2021ATTACK:enterprise:C0005 → uses → ATTACK:enterprise:S0385
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--93b303a6-3529-4cbd-941f-4dc71b8e73d8
ESET Operation Spalax Jan 2021ATTACK:enterprise:C0005 → uses → ATTACK:enterprise:T1218.011
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b7f5a141-2db6-4f76-b3d7-bbd665035f84
ESET Operation Spalax Jan 2021ATTACK:enterprise:C0005 → uses → ATTACK:enterprise:T1027.013
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d6de484e-a1f6-43cb-a506-ec4888e69bdd
ESET Operation Spalax Jan 2021ATTACK:enterprise:C0005 → uses → ATTACK:enterprise:S0332
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e4007652-cc24-4786-926f-db4ff8349e88
ESET Operation Spalax Jan 2021