CiberLATAMbywhalemate

#SOCKS5

This archive collects reporting on application-layer proxies in cybersecurity, covering both legitimate use and patterns of abuse. Readers will find stories on traffic hiding, control evasion, command infrastructure, and the techniques that often surface in intrusion, fraud, and monitoring campaigns across Latin America.

Brazil financial sector targeted by Unit 42

Unit 42 found two active campaigns in Latin America. One targeted Brazil's financial sector with job phishing, RATs and SOCKS5 tunnels.

Sep 14, 2026 · 2 min

Mexico, Brazil, Ecuador in CL-CRI-1131, 1163

Unit 42 tracked two AI-assisted intrusion clusters in Mexico, Ecuador and Brazil, using NextChat, Claude

Sep 7, 2026 · 38 min