MÉXICO – Guacamaya: los otros ataques del grupo que hackeó al gobierno de AMLO /Hackers Leak Thousands of Files from SEDENA, Including Culiacanazo Reports

El grupo de hacktivistas ha sido responsable por filtraciones masivas en otros países de América Latina

La noche de este jueves 29 de septiembre se dio una de las mayores vulneraciones a los sistemas de ciberseguridad del Gobierno mexicano, ya que un grupo de hacktivistas logró penetrar los sistemas de la Secretaría de la Defensa Nacional (Sedena) y acceder a miles de documentos confidenciales.

Entre ellos, algunos que develan el estado de salud del primer mandatario Andrés Manuel López Obrador (AMLO); diferencias entre los titulares de las principales corporaciones de seguridad del país, la Sedena y la Secretaría de Marina (Semar); de igual forma, nuevos datos sobre lo que ocurrió en el “Culiacanazo”.

Dicha información fue compartida al periodista Carlos Loret de Mola por parte del grupo responsable del hackeo, conocido como Guacamaya, un grupo identificado como un grupo proveniente de centroamérica defensor de la naturaleza.

Sin embargo, este no es la primera vez que realizan este tipo de filtraciones, pues desde el pasado 19 de septiembre, el grupo adelantó que como parte de su Operación Fuerzas Represivas, llevarían a cabo filtraciones en Perú, Salvador, Chile y Colombia, además de México.

El grupo se ha enfocado en corporaciones de seguridad de los países mencionados, pero también lo han hecho con empresas mineras y petroleras en América Latina.

Proyectos mineros y petroleros

Este fue hecho el 6 de marzo cuando el grupo hackeó los sistemas de comunicación del Proyecto Minero Fénix de la Compañía Guatemalteca Níquel (CGN) y Pronico del conglomerado minero Solway Group.

Meses después, el 7 de agosto, filtró los documentos de empresas mineras y petroleras de Chile, Ecuador, Colombia y Venezuela.

Por otro lado, el pasado 23 del mismo mes, el sitio DdoSecrets.com dio a conocer que Guacamaya habría filtrado más de 1 Tb de mails de compañías mineras y petroleras de los países mencionados una vez más.

Ya que en un comunicado, los hackers se han declarado en guerra contra aquellos que busquen arrasar con la naturaleza y la madre tierra en favor de los fines capitalistas impulsados por Estados Unidos en América Latina.

Fiscalía de Colombia

Durante el mismo día, el 7 agosto pasado, el grupo filtró 5 Terabytes de correos electrónicos de la oficina del Fiscal General de Colombia, quien ha sido vinculada a varios actos de corrupción, así como nexos en el tráfico de drogas y redes paramilitares, persecución política y asesinatos.

Igualmente compartieron un comunicado en el que tildaron a la Fiscalía como una de las organizaciones más corruptas.

Filtración de EMCO, Chile

El 19 de septiembre la agrupación se hizo presente con la penetración al sistema de seguridad del Estado Mayor Conjunto de las Fuerzas Armadas de Chile (EMCO), filtrando cerca de 400 mil correos electrónicos del organismo.

Por lo que la ministra de Defensa de Chile, Maya Fernández tuvo que suspender su agenda y el jefe del Estado Mayor chileno, Guillermo Paiva, presentó su renuncia. A diferencia del caso mexicano, la cantidad de información llegó a los 10 terabytes, mientras que el volumen de información en México fue de 6 Terabytes.

En estos se abarcan comunicaciones desde el 2012 al 2022 entre miembros del EMCO, donde pasa parte de la información de Inteligencia y tácticas de las Fuerzas Armadas.

De igual forma, el sitio DdoSecret.com, informó que el grupo obtuvo 175 mil correos del Ejército de Perú (aunque no han sido publicados), 10 millones de correos de la Policía Nacional Civil y 250 mil de la Fuerza Armada de El Salvador (tampoco ha sido hecho público).

En su comunicado, el grupo establece su posicionamiento en contra de las corporaciones militares y de seguridad quienes “eclipsan” las libertades y los derechos humanos.

“Es por esto que Guacamaya nos filtramos en sus sistemas y hacemos pública la propia documentación de estos entes del terror”, aseveraron.

Hackers Leak Thousands of Files from SEDENA, Including Culiacanazo Reports

On the night of Thursday, September 29, one of the biggest violations of the Mexican Government’s cybersecurity systems occurred, a group of hacktivists managed to penetrate the systems of the Secretary of National Defense (Sedena) and access thousands of documents. confidential.

Among them, some that reveal the state of health of president Andrés Manuel López Obrador (AMLO); differences between the heads of the country’s main security corporations, Sedena and the Secretary of the Navy (Semar); Similarly, and new information about what happened in the “Culiacanazo”.

This information was shared with the journalist Carlos Loret de Mola by the group responsible for the hack, known as Guacamaya, a group identified as a group from Central America that defends nature.

Culiacanazo Reports

One of the documents reveals how the children of Chapo Guzmán “bent” the Mexican government in the operation known as Culiacanazo, which occurred on October 17, 2019.

In one of the emails reviewed, a special part of the Culiacanazo is given as an example so that the members of the National Guard write this type of report in this way. The document summarizes what happened:

“The Army establishes that at 3:15 p.m. “the arrest of Ovidio Guzmán was carried out, fulfilling an arrest warrant issued on April 2, 2018, by the Federal Court of Columbia in the United States, for crimes of organized crime for the purpose of stockpiling and trafficking weapons, kidnapping, collection of flat and crimes against health.

“The military report explains that two minutes later, ‘the security forces invite Ovidio to persuade his brothers to cease their hostile attitude’, and that for this he communicated directly with “Iván Archivaldo Guzmán Salazar, ordering him to order the cessation of the attacks, but his brother responded with a refusal and made threats against the military personnel and their families”.

Sedena had assured that there were eight deaths, but internal reports indicate an additional victim, whose charred remains and bodies with bullet wounds were in official local police units, as well as in a National Guard truck.

The military report states: “At 7:30 p.m., the order was received from the Citizen President of the Republic to cease the operation to arrest Ovidio Guzmán López.”

Although the official narrative is not modified, the schedule details open questions about the duration of the operation. At the time, President López Obrador justified that if he had not released the son of Chapo Guzmán, up to 200 people would have died. A week after the events, part of the justification was that the search warrant was not obtained on time, but lack of planning was also accused and support from the US Department of Justice.

Clash Over Security Policies

One more piece of information that Latinus reveals is that there is a letter from the Secretary of the Navy, Admiral Rafael Ojeda, to the Secretary of Defense, General Luis Crescencio Sandoval, in which they show their differences on security at the Mexico City International Airport (AICM), dated June 22.

In one of the paragraphs written by Admiral Ojeda, the following can be read:

“This is not a question of numbers, but of coordination between institutions, always respecting our areas of competence…never with the intention of seeking protagonism.”
Another national security fact that they released is how many Army personnel are stationed at each of the Tijuana border crossings, and at each tactical point.

They emphasize that on the southern border, in Cancun, the case is “especially serious,” according to Latinus’ note, since in the Cancun airport terminal the Defense admits that the optimal thing is to have 56 elements, but there are only 14. At some times, the presence of personnel is three soldiers, which puts this area in “conditions of critical weakness”, which would leave an open door for all kinds of illegal traffic.

Guacamaya Hackers

This is not the first time Guacamaya hackers have carried out this type of leak, since September 19, the group announced that as part of its Operation Repressive Forces, they would carry out leaks in Peru, El Salvador, Chile, and Colombia, in addition to Mexico.

They leaked 5 Terabytes of emails from the Colombian Attorney General’s office, which have been linked to various acts of corruption, as well as links in drug trafficking and paramilitary networks, persecution politics, and assassinations. They also shared a statement that branded the Prosecutor’s Office as one of the most corrupt organizations.

Of supposed Central American origin, the organization denounces “five centuries of genocide, terricide, looting and rape” in the territory of “Abya Yala”, as it calls America. In this context, and in accordance with the background of various sites specialized in hacktivist groups, Guacamaya protests against military interventions and large mining and oil companies, among others. Germán Fernández, Director of Operations at CronUp Cybersecurity, explains that it is a hacktivist group, which, unlike traditional hackers, acts for political or social reasons, not for money or corporate interests. By Socalj