
Mexico warns of bank app and site fraud
Alerts in Mexico point to cloned bank sites and altered apps that steal credentials, tokens and personal data, even with biometrics.
Oct 22, 2026 · 2 min
Up-to-date cyber intelligence coverage. Filter by category or browse the full archive.

Alerts in Mexico point to cloned bank sites and altered apps that steal credentials, tokens and personal data, even with biometrics.
Oct 22, 2026 · 2 min

Hirudo can swap legitimate banking apps for altered copies on Android and bypass security checks. No bank attack has been confirmed.
Oct 21, 2026 · 2 min

ACSec identified Victoria water utility, MCM Telecom and Price Shoes as Mexican victims disclosed by Qilin.
Oct 14, 2026 · 2 min

ACSec, Víctor Ruiz and FalconFeeds.io attributed a supposed Qilin attack to COMAPA Victoria, without independent confirmation.
Oct 14, 2026 · 1 min

Mexican bank customers reported 11,213 million pesos in possible fraud claims in the first half of 2026, according to Condusef.
Oct 11, 2026 · 2 min

ACSec and Darkfield list MCM Telecom as a recent Qilin-linked victim in Mexico, though there is no independent confirmation of the incident.
Oct 10, 2026 · 1 min

ASEA said its @agencia_asea Instagram account was compromised and asked the public to ignore posts while it works to regain access.
Oct 6, 2026 · 2 min

SCILabs recorded 290 ransomware attacks in Latin America in the first half of 2026. Mexico accounted for 17.93%, with finance in focus.
Oct 4, 2026 · 4 min

SAFEPAY added Mexican manufacturer Auromex to its leak site. Security Arsenal also documented the group’s TTPs, and a note cited SCILabs.
Oct 2, 2026 · 2 min

Mexico is investigating Telegram posts offering 12.9 million personal records tied to call centers, and in some cases bank data.
Sep 27, 2026 · 2 min

Mexico logged about 52 ransomware attacks in the first half of 2026, ranking second in Latin America, according to SCILabs.
Sep 26, 2026 · 4 min

INCAN said radiotherapy has been back to normal since Sept. 11 after a cybersecurity incident affected the unit.
Sep 22, 2026 · 2 min

Mexico’s anti-corruption office is investigating a possible leak of more than 15 million Aeroméxico records, while the airline reviews it.
Sep 21, 2026 · 2 min

Proofpoint saw large-scale email campaigns targeting Mexico in July and August 2026.
Sep 19, 2026 · 2 min

SafePay has added laconcepcion.com.mx to its victim list. Threat intelligence sources place it in Mexico and link it to a possible health provider.
Sep 17, 2026 · 2 min

Local media report a possible cyberattack on the Yucatán government. The case is under investigation and no official statement has been issued.
Sep 15, 2026 · 2 min

Local reports say allegedly hacked UASLP data was posted publicly, including personal information and photos of students.
Sep 14, 2026 · 2 min

San Luis Potosí City Hall said 2.9 GB of data and more than 15,000 documents were stolen, then reported an extortion attempt.
Aug 29, 2026 · 4 min

Zimperium found ToxicPanda 2.0, an Android variant expanding to more than 140 banking and crypto apps across 16 countries.
Aug 26, 2026 · 2 min

Quaker State Mexico appeared in a Qilin-attributed listing, with no independent public confirmation of a breach or data theft.
Aug 22, 2026 · 2 min

Ransomware.live and Breachsense list mecasem.org as a 3AM victim. GalaxyWarden says there is no public confirmation from the company.
Aug 21, 2026 · 2 min

Sears (Grupo Sanborns) was listed as a suspected Space Bears victim on a leak site and in aggregators, with no official confirmation.
Aug 16, 2026 · 2 min

Banamex, BBVA Mexico, Santander, Banco Azteca and Banorte urged customers to watch for unauthorized charges and account access.
Aug 11, 2026 · 2 min

Mexico ranks second in Latin America for ransomware victims, with more than 270 public cases by late July and services among the main targets.
Aug 5, 2026 · 4 min

Sanoviv Medical Institute, Centro Médico Palafox and Depósito Dental Universitario appear in ransomware monitoring records.
Aug 3, 2026 · 2 min

An unknown AI-assisted actor hit Mexican government agencies and a Monterrey water utility. Dragos did not link it to known APTs.
Jul 29, 2026 · 2 min

Dragos linked an unidentified actor to data theft in Mexico’s government and an intrusion attempt against a municipal water utility.
Jul 29, 2026 · 2 min

Officials in Sinaloa reported a possible leak of medical records, payroll data and bank accounts. No public technical findings are available.
Jul 28, 2026 · 2 min

Brazil accounts for 51% of public-sector ransomware attacks in Latin America as DragonForce scales extortion with RaaS and stolen data.
Jul 22, 2026 · 2 min

Hunt.io found LLM-assisted espionage against governments and finance. In Mexico, a phishing network hit banks with more than 100 domains.
Jul 21, 2026 · 3 min

Fraud claims in Mexico hit 5.2 billion pesos in Q1 2026, with banks paying or resolving 2.2 billion pesos for users.
Jul 11, 2026 · 2 min