TGR-STA-1030: New Activity in Central and South America

TGR-STA-1030 remains an active threat. Since February, we have observed widespread activity from this group across multiple countries. Most recently, their efforts appear to be heavily focused on regions within Central and South America. We have observed the same tactics, techniques and procedures used previously by this group. Additional Resources The Shadow Campaigns: Uncovering Global Espionage – Unit 42, Palo Alto Networks Back to top TAGS TGR-STA-1030 Threat Research Center Next: Frontier AI and the Future of Defense: Your Top Questions Answered TABLE OF CONTENTS RELATED ARTICLES The Shadow Campaigns: Uncovering Global Espionage Related General Resources INSIGHTS January 23, 2026 Happy 9th Anniversary, CTA: A Celebration of Collaboration in Cyber Defense Cyber Threat Alliance Unit 42 Read now INSIGHTS January 8, 2026 Securing Vibe Coding Tools: Scaling Productivity Without Scaling Risk GenAI Read now INSIGHTS December 16, 2025 Stay Secure: Why Cyber Hygiene Should Be Part of Your Personal Hygiene Cybersecurity MFA Patchwork Read now INSIGHTS April 23, 2026 Frontier AI and the Future of Defense: Your Top Questions Answered GenAI LLM N-day Read now INSIGHTS April 20, 2026 Fracturing Software Security With Frontier AI Models AI Attack path Data exfiltration Read now INSIGHTS March 18, 2026 Navigating Security Tradeoffs of AI Agents Agentic AI Privilege escalation Unit 42 Incident Response Report Read now INSIGHTS March 16, 2026 Iranian Cyber Threat Evolution: From MBR Wipers to Identity Weaponization Agonizing Serpens Agrius Curious Serpens Read now INSIGHTS March 12, 2026 Insights: Increased Risk of Wiper Attacks Hacktivism Wiper Read now INSIGHTS February 24, 2026 Bring the Fight to the Edge: Turning Time Into an Advantage in OT Security Defense Operational Technology Threat detection Read now INSIGHTS January 23, 2026 Happy 9th Anniversary, CTA: A Celebration of Collaboration in Cyber Defense Cyber Threat Alliance Unit 42 Read now INSIGHTS January 8, 2026 Securing Vibe Coding Tools: Scaling Productivity Without Scaling Risk GenAI Read now INSIGHTS December 16, 2025 Stay Secure: Why Cyber Hygiene Should Be Part of Your Personal Hygiene Cybersecurity MFA Patchwork Read now INSIGHTS April 23, 2026 Frontier AI and the Future of Defense: Your Top Questions Answered GenAI LLM N-day Read now INSIGHTS April 20, 2026 Fracturing Software Security With Frontier AI Models AI Attack path Data exfiltration Read now INSIGHTS March 18, 2026 Navigating Security Tradeoffs of AI Agents Agentic AI Privilege escalation Unit 42 Incident Response Report Read now INSIGHTS March 16, 2026 Iranian Cyber Threat Evolution: From MBR Wipers to Identity Weaponization Agonizing Serpens Agrius Curious Serpens Read now INSIGHTS March 12, 2026 Insights: Increased Risk of Wiper Attacks Hacktivism Wiper Read now INSIGHTS February 24, 2026 Bring the Fight to the Edge: Turning Time Into an Advantage in OT Security Defense Operational Technology Threat detection Read now INSIGHTS January 23, 2026 Happy 9th Anniversary, CTA: A Celebration of Collaboration in Cyber Defense Cyber Threat Alliance Unit 42 Read now INSIGHTS January 8, 2026 Securing Vibe Coding Tools: Scaling Productivity Without Scaling Risk GenAI Read now INSIGHTS December 16, 2025 Stay Secure: Why Cyber Hygiene Should Be Part of Your Personal Hygiene Cybersecurity MFA Patchwork Read now