A new hack-for-hire group has been employing custom malware in attacks that target disparate victims worldwide. The group, dubbed “CostaRicto,” uses a combination of bespoke malware and off-the-shelf tools to infiltrate target organizations. The emergence of this group underscores a broader trend of mercenary APT groups appearing on the threat landscape. Attackers’ tactics, techniques, and procedures resemble those seen in advanced nation-state attacks, but their victims’ profiles are too diverse to be aligned with a single attacker’s goals.”]