CrowdStrike 2026 Global Threat Report: The definitive threat intelligence report for the AI era Download report
Galactic Ocelot
Discover the adversaries targeting your industry
Back to Adversary Universe
GALACTIC OCELOT is a targeted intrusion adversary active since at least 2010 with a nexus to the Colombian government. Over this period, this adversary has primarily relied on a single custom Python-based malware tool, Ragua (a.k.a. Machete), that they have iterated across operations while maintaining the malware’s core information-stealing functionality. Most recently, the malware has evolved to ...
-
Galactic Ocelot
-
Colombia, South America, Americas
Community Identifiers
El Machete, APT-C-43
Objective
Intelligence Gathering
Motivation
State-Sponsored
Who's targeting your industry?
Today's adversaries are faster, smarter, and better resourced. Know who they are and how to stop them.
View adversaries
CrowdStrike 2025 Threat Hunting Report
Adversaries weaponize and target AI at scale.
