#threat intelligence
This archive brings together analysis, reports, and coverage on how digital threats are identified, interpreted, and anticipated across Latin America. Readers will find tracking of campaigns, detection methods, attribution work, indicators of compromise, and reporting on actors, tactics, and emerging attack trends.
SafePay Adds laconcepcion.com.mx in Mexico
SafePay has added laconcepcion.com.mx to its victim list. Threat intelligence sources place it in Mexico and link it to a possible health provider.
Sep 17, 2026 · 2 min
Direwolf Lists Oportunidados on Leak Site
Oportunidados was listed by Direwolf and tracked by multiple intelligence panels. Some sources allege exfiltration and critical severity.
Sep 2, 2026 · 3 min
CoinbaseCartel, Storm Target US Victims
CoinbaseCartel, Storm, Qilin, DragonForce and SilentRansomGroup posted new victims in the US and Canada across health, finance
Aug 27, 2026 · 4 min
Arcos appears in Emperador leak
Brazil’s Arcos city hall appears on a leak site tied to Emperador, but the claim has not been independently verified.
Aug 19, 2026 · 2 min
Argentina on the ransomware map
Ransomware.live shows 160 to 177 victims linked to Argentina. Qilin also claimed an attack on the Argentine Army.
Aug 1, 2026 · 2 min