The Mask is an advanced threat actor that has been involved in cyber-espionage operations since at least 2007. The name The Mask comes from the Spanish slang word Careto (Mask or Ugly Face) An infection with Careto is disastrous. The malware intercepts all the communication channels and collects the most vital information from the infected system. Detection is extremely difficult because of stealth rootkit capabilities. Given the nature of the known victims, the impact is potentially very high.”]
Source: https://securelist.com/the-caretomask-apt-frequently-asked-questions/58254/