Skip to content
Install MCP

Threat actor

Alpheratz

Last fetched

Alpheratz is a threat actor tracked in WhisperGraph's MITRE ATT&CK corpus, observed using 0 techniques.

Description

Alpheratz is a security and intelligence solutions distributor based in Quito, Ecuador. Founded in 2014, the company serves as a regional representative of surveillance tools, primarily working with Ecuadorian public institutions including the national police force, joint armed forces command, and the office of the prosecutor general. As a distributor, Alpheratz represents various international intelligence firms, including Israeli cyber intelligence companies that are part of Tal Dilian's Intellexa network, and acts as their representative in Ecuador. According to Intelligence Online, Alpheratz also represents other intelligence companies, including Sweden's MSAB, Canada's Magnet Forensics and Polish big data analytics specialist Datawalk. The company's full legal name is Soluciones Globales & Representaciones Alpheratz Cia. LTDA.

Techniques by tactic

No ATT&CK techniques are recorded for Alpheratz in WhisperGraph.

Attributed infrastructure

None published. WhisperGraph carries no ATTRIBUTED_TO edge to Alpheratz today — this states the absence of a published link, not that Alpheratz has no infrastructure.

References

© The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation.

Related pages

Pivot from Alpheratz into its techniques, tactics and any attributed infrastructure.

Queries

Resolves the slug to this actor, merging every duplicate node sharing the same name.


MATCH (a:ACTOR)
WHERE a.name =~ $pattern OR any(x IN a.aliases WHERE x =~ $pattern)
RETURN a.id AS id, a.name AS name, a.aliases AS aliases, a.description AS description,
       a.references AS references, a.campaigns AS campaigns
LIMIT 25
Run yourself →

Techniques this actor uses, grouped by the tactic each one serves.


MATCH (a:ACTOR {name: $name})-[:USES_TECHNIQUE]->(t:ATTACK_PATTERN)
OPTIONAL MATCH (t)-[:USES_TACTIC]->(tac:ATTACK_PATTERN)
RETURN t.id AS techniqueId, t.name AS techniqueName, tac.id AS tacticId, tac.name AS tacticName
LIMIT 1000
Run yourself →

Infrastructure publicly attributed to this actor.


MATCH (n)-[:ATTRIBUTED_TO]->(a:ACTOR {name: $name})
RETURN labels(n)[0] AS kind, n.name AS name
LIMIT 25
Run yourself →

Or query Whisper from your own LLM workflow via the Whisper MCP server.