GINC-APT-0670 · Tracked, unattributed

CiberInteligenciaSV

Category
Tracked, unattributed · A vendor’s working cluster, not yet attributed.
Origin
Unknown
Sources
3 sources carry it
Identifier
GINC-APT-0670 · ciberinteligenciasv

What it is

CiberInteligenciaSV is a threat actor that leaked 5.1 million Salvadoran records on Breach Forums. They have also compromised El Salvador's state Bitcoin wallet, Chivo, leaking its source code and VPN credentials. The group aims to obscure their involvement by associating with the Guacamaya group and its proxies.

Sources

  • Malpedia malpedia.caad.fkie.fraunhofer.de