CrowdStrike Protects Customers from Threats Delivered via PHP2Shell Read blog
Your Cart
Added to Cart
There's nothing in your cart
per endpoint / per year
per endpoint / per month
Galactic Ocelot
Discover the adversaries targeting your industry
Back to Adversary Universe
GALACTIC OCELOT is a targeted intrusion adversary active since at least 2010 with a nexus to the Colombian government. Over this period, this adversary has primarily relied on a single custom Python-based malware tool, Ragua (a.k.a. Machete), that they have iterated across operations while maintaining the malware’s core information-stealing functionality. Most recently, the malware has evolved to ...
-
Galactic Ocelot
-
Colombia, South America, Americas
Community Identifiers
El Machete, APT-C-43
Objective
Intelligence Gathering
Motivation
State-Sponsored
Who's targeting your industry?
Today's adversaries are faster, smarter, and better resourced. Know who they are and how to stop them.
View adversaries
CrowdStrike 2026 Threat Hunting Report
Get insights from frontline experts.
