CostaBricks
Software · ATTACK:enterprise:S0614
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:S0614",
"title": "CostaBricks",
"type": "Software",
"source_url": "https://attack.mitre.org/software/S0614",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "malware--5d342981-5194-41e7-b33f-8e91998d7d88",
"external_id": "S0614",
"domain": "enterprise",
"created": "2021-05-24T15:56:18.522Z",
"modified": "2025-04-16T20:38:11.736Z",
"version": "1.1",
"aliases": [
],
"tactics": [
],
"source_references": [
{
"source_name": "BlackBerry CostaRicto November 2020",
"url": "https://blogs.blackberry.com/en/2020/11/the-costaricto-campaign-cyber-espionage-outsourced"
}
]
}Explicit source assertions (7)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:S0614 → uses → ATTACK:enterprise:T1105
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--48652244-02b0-4a80-82a9-b99fca669d85
BlackBerry CostaRicto November 2020ATTACK:enterprise:S0614 → uses → ATTACK:enterprise:T1027.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--66c79e9f-7528-4a14-9525-866325b6abce
BlackBerry CostaRicto November 2020ATTACK:enterprise:S0614 → uses → ATTACK:enterprise:T1027.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8a8fa25a-8cc6-4bd1-a97a-a0d9df9c1507
BlackBerry CostaRicto November 2020ATTACK:enterprise:C0004 → uses → ATTACK:enterprise:S0614
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8b5037a6-8899-4180-bcb3-fbcfbd83f3e1
BlackBerry CostaRicto November 2020ATTACK:enterprise:S0614 → uses → ATTACK:enterprise:T1055
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a08454ac-6680-4ea1-ab2a-f272f562fc25
BlackBerry CostaRicto November 2020ATTACK:enterprise:S0614 → uses → ATTACK:enterprise:T1106
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f10beefd-2bc1-4657-9c55-0ee28905b9ac
BlackBerry CostaRicto November 2020ATTACK:enterprise:S0614 → uses → ATTACK:enterprise:T1140
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f2d433c3-d134-4985-8dc1-b35d407b330a
BlackBerry CostaRicto November 2020