{
	"id": "c4f9cdac-2aae-40ec-89db-9232d5dc55cd",
	"created_at": "2026-04-06T00:11:03.340056Z",
	"updated_at": "2026-04-10T03:31:18.942998Z",
	"deleted_at": null,
	"sha1_hash": "6e8af14f408e31068f2f428de4af31983c6fcb37",
	"title": "Threat Group Cards: A Threat Actor Encyclopedia",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 54654,
	"plain_text": "Threat Group Cards: A Threat Actor Encyclopedia\nArchived: 2026-04-02 10:44:40 UTC\nHome \u003e List all groups \u003e List all tools \u003e List all groups using tool Careto\n Tool: Careto\nNames\nCareto\nMask\nAppetite\nCategory Malware\nType Backdoor, Downloader, Info stealer\nDescription\n(Kaspersky) For the victims, an infection with Careto is disastrous. The malware intercepts all\nthe communication channels and collects the most vital information from the infected system.\nDetection is extremely difficult because of stealth rootkit capabilities. In addition to built-in\nfunctionalities, the operators of Careto can upload additional modules which can perform any\nmalicious task. Given the nature of the known victims, the impact is potentially very high.\nInformation\nMalpedia Last change to this tool card: 13 May 2020\nDownload this tool card in JSON format\nAll groups using tool Careto\nChanged Name Country Observed\nAPT groups\n Careto, The Mask 2007-2022\n1 group listed (1 APT, 0 other, 0 unknown)\nhttps://apt.etda.or.th/cgi-bin/listgroups.cgi?u=e5fdfb1c-b2f3-42a2-868b-46b0f10f8c2d\nPage 1 of 2\n\nSource: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=e5fdfb1c-b2f3-42a2-868b-46b0f10f8c2d\r\nhttps://apt.etda.or.th/cgi-bin/listgroups.cgi?u=e5fdfb1c-b2f3-42a2-868b-46b0f10f8c2d\r\nPage 2 of 2\n\nAPT groups Careto, The Mask 2007-2022 \n1 group listed (1 APT, 0 other, 0 unknown) \n   Page 1 of 2",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"ETDA"
	],
	"references": [
		"https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=e5fdfb1c-b2f3-42a2-868b-46b0f10f8c2d"
	],
	"report_names": [
		"listgroups.cgi?u=e5fdfb1c-b2f3-42a2-868b-46b0f10f8c2d"
	],
	"threat_actors": [
		{
			"id": "67bf0462-41a3-4da5-b876-187e9ef7c375",
			"created_at": "2022-10-25T16:07:23.44832Z",
			"updated_at": "2026-04-10T02:00:04.607111Z",
			"deleted_at": null,
			"main_name": "Careto",
			"aliases": [
				"Careto",
				"The Mask",
				"Ugly Face"
			],
			"source_name": "ETDA:Careto",
			"tools": [
				"Careto"
			],
			"source_id": "ETDA",
			"reports": null
		},
		{
			"id": "f5bf6853-3f6e-452c-a7b7-8f81c9a27476",
			"created_at": "2023-01-06T13:46:38.677391Z",
			"updated_at": "2026-04-10T02:00:03.064818Z",
			"deleted_at": null,
			"main_name": "Careto",
			"aliases": [
				"The Mask",
				"Ugly Face"
			],
			"source_name": "MISPGALAXY:Careto",
			"tools": [],
			"source_id": "MISPGALAXY",
			"reports": null
		}
	],
	"ts_created_at": 1775434263,
	"ts_updated_at": 1775791878,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/6e8af14f408e31068f2f428de4af31983c6fcb37.pdf",
		"text": "https://archive.orkl.eu/6e8af14f408e31068f2f428de4af31983c6fcb37.txt",
		"img": "https://archive.orkl.eu/6e8af14f408e31068f2f428de4af31983c6fcb37.jpg"
	}
}