Gold Open Source
ExplorePackagesVulnerabilitiesCWEsMCP ServersScan
Login
Gold Open Source

The authoritative source for production-ready open-source components. Every package, container image, AI model, and MCP server undergoes rigorous verification for security, malware, and license compliance.

Explore Gold

  • Explore Everything
  • Packages
  • Gold Certified Packages
  • Container Images
  • AI Models
  • MCP Servers
  • Agent Skills
  • Chip Manufacturers

Security Data & Tools

  • Scan Your Dependencies
  • Trending Threats
  • Threat RSS Feeds
  • CVE Database
  • Actively Exploited (KEV)
  • SGZ Zero-Days
  • CWE Index
  • MITRE ATT&CK
  • Malicious Packages
  • Security Glossary
  • Supply-Chain Report
  • Developers (API & Badge)
  • Chrome Extension
  • Credits & Data Sources

Products

  • The Platform
  • ESSCM
  • Portal
  • TPRM
  • OSM
  • Cowork
  • Code / Runner
  • Guard

Use Cases

  • Know Your Software
  • Auto-Fix Vulnerabilities
  • Asset Discovery
  • AI Governance
  • MCP Server Security
  • Supply Chain Compliance
  • Zero-Day Discovery
  • All Use Cases

Company

  • About
  • Pricing
  • Blog
  • Documentation
  • Safeguard Academy
  • Contact
  • Privacy Policy
  • Terms of Service

© 2026 Gold Open Source. All rights reserved.

Built with care bySafeguard
Home/ATT&CK/Software/S0625
MITRE ATT&CK Malware

Cuba (S0625)

ShareXLinkedInRedditHN

[Cuba](https://attack.mitre.org/software/S0625) is a Windows-based ransomware family that has been used against financial institutions, technology, and logistics organizations in North and South America as well as Europe since at least December 2019.(Citation: McAfee Cuba April 2021)

Platforms: Windows

▪Techniques implemented (23)

T1680Local Storage DiscoveryT1543.003Windows ServiceT1027.002Software PackingT1106Native APIT1614.001System Language DiscoveryT1486Data Encrypted for ImpactT1135Network Share DiscoveryT1059.003Windows Command ShellT1070.004File DeletionT1620Reflective Code LoadingT1059.001PowerShellT1083File and Directory DiscoveryT1105Ingress Tool TransferT1056.001KeyloggingT1027Obfuscated Files or InformationT1489Service StopT1016System Network Configuration DiscoveryT1049System Network Connections DiscoveryT1007System Service DiscoveryT1057Process DiscoveryT1134Access Token ManipulationT1036.005Match Legitimate Resource Name or LocationT1564.003Hidden Window
S0625on MITRE ATT&CK →

MITRE ATT&CK® is a registered trademark of The MITRE Corporation. © 2026 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation.