National Bolivarian Armed Forces of Venezuela

The National Bolivarian Armed Forces of Venezuela, headquartered in Venezuela, constitute the country's military establishment. In March 2019, this organization became the target of a sophisticated cyber-espionage campaign conducted by the group known as Machete. The attackers employed spear-phishing emails containing malicious radiogram documents, which had been stolen from previous operations, to deliver a backdoor trojan to the military's systems. This malware facilitated the exfiltration of sensitive geographic information system files that detailed military navigation routes and grid positions, underscoring the armed forces' responsibility for managing critical geospatial data essential to operational planning. Notably, more than half of the compromised devices belonged to the Venezuelan military, indicating a significant breach within their digital infrastructure.

The campaign represented a strategic shift for the Machete group, as it marked their increased focus on Latin American military entities, with the Venezuelan armed forces being a primary victim. The attack also impacted neighboring countries' military organizations, suggesting regional implications for defense security. The malware infrastructure used in this operation was distinct from earlier variants observed in the group's global activities, highlighting an evolution in their tactics. This incident illustrates the Venezuelan military's exposure to advanced persistent threats and their role as a custodian of sensitive navigation and positioning data. The breach of such information could compromise operational security and tactical mobility, reflecting the high stakes involved in safeguarding military geospatial assets against cyber adversaries.