NotiCyber

📡 Noticias de ciberseguridad y filtraciones de datos | Alertas tempranas y análisis de brechas | InfoSec en tiempo real

[NotiCyber @AndNoticiaCyber]

🚨 ¡ALERTA DE FILTRACIÓN MASIVA DE DATOS! SALUDSA S.A. Y OXTEAM HAN SIDO VÍCTIMAS DE UNA FILTRACIÓN DE DATOS EN ECUADOR 📷🇪🇨 El actor expuso +30k de datos confidenciales, incluyendo nombres, direcciones, números de teléfono, emails personales, datos internos coorporativos.

[NotiCyber @AndNoticiaCyber]

@revistavistazo filtración masiva de datos.

https://t.co/yySq2kwssy

[VECERT Analyzer @VECERTRadar]

🚨 🌐 CYBER INTELLIGENCE ALERT: NEW DATA BREACHES IN LATAM 🇪🇨 🇨🇴

⚠️ HIGH PRIORITY: DETECTION OF THREAT ACTIVITY IN ECUADOR AND COLOMBIA

[STATUS: UNCONFIRMED / UNDER INVESTIGATION, EVIDENCE VISIBLE]

New cyber intelligence activity has been registered, reporting two critical cases of sensitive data exposure:

1. Case #6681: Vistazo Magazine (Ecuador 🇪🇨)
Threat actor: GondorPe.

Date: 2026-05-29.

Scope: Exposure of subscriber data, including sensitive financial and personal information.

2. Case #6677: Files | Punto Vital (Colombia 🇨🇴)
Threat Actor: Bytedope157sp.

Date: 2026-05-29.

Scope: Exposure of more than 3,000 sensitive files (records).

The documented activity reflects a wave of targeted attacks against entities that manage databases containing private user information. The exposure of "Files" at Punto Vital and subscription data at Vistazo Magazine suggests that the actors are prioritizing the acquisition of PII (Personally Identifiable Information) and medical or administrative records for illicit purposes.

🛡️ Mitigation Recommendations

Data Audit: The organizations involved should conduct an immediate technical review of their systems to verify the integrity of the databases and the potential persistence of unauthorized access.

User Protection: Users affected by these leaks are advised to actively monitor their financial accounts and emails for potential phishing or fraud attempts.

⚡ Strategic Monitoring

🌐 Intelligence System: https://t.co/wk9bZJ2Nli

🛡️ Quickly assess your website's security with: https://t.co/YnDw1QjN9c

#CyberSecurity #DataLeak #Ecuador #Colombia #Vistazo #PuntoVital #ThreatIntelligence #CiberAlerta #VECERT

[NotiCyber @AndNoticiaCyber]

@revistavistazo filtracion masiva de datos.

https://t.co/yySq2kwssy

[VECERT Analyzer @VECERTRadar]

🚨 🌐 CYBER INTELLIGENCE ALERT: NEW DATA BREACHES IN LATAM 🇪🇨 🇨🇴

⚠️ HIGH PRIORITY: DETECTION OF THREAT ACTIVITY IN ECUADOR AND COLOMBIA

[STATUS: UNCONFIRMED / UNDER INVESTIGATION, EVIDENCE VISIBLE]

New cyber intelligence activity has been registered, reporting two critical cases of sensitive data exposure:

1. Case #6681: Vistazo Magazine (Ecuador 🇪🇨)
Threat actor: GondorPe.

Date: 2026-05-29.

Scope: Exposure of subscriber data, including sensitive financial and personal information.

2. Case #6677: Files | Punto Vital (Colombia 🇨🇴)
Threat Actor: Bytedope157sp.

Date: 2026-05-29.

Scope: Exposure of more than 3,000 sensitive files (records).

The documented activity reflects a wave of targeted attacks against entities that manage databases containing private user information. The exposure of "Files" at Punto Vital and subscription data at Vistazo Magazine suggests that the actors are prioritizing the acquisition of PII (Personally Identifiable Information) and medical or administrative records for illicit purposes.

🛡️ Mitigation Recommendations

Data Audit: The organizations involved should conduct an immediate technical review of their systems to verify the integrity of the databases and the potential persistence of unauthorized access.

User Protection: Users affected by these leaks are advised to actively monitor their financial accounts and emails for potential phishing or fraud attempts.

⚡ Strategic Monitoring

🌐 Intelligence System: https://t.co/wk9bZJ2Nli

🛡️ Quickly assess your website's security with: https://t.co/YnDw1QjN9c

#CyberSecurity #DataLeak #Ecuador #Colombia #Vistazo #PuntoVital #ThreatIntelligence #CiberAlerta #VECERT

[Ola Bini - (@[email protected]) @olabini]

Posible vulneración de @revistavistazo

[Usuarios Digitales @usuariosdigital]

#AlertaDigitalEC
Se denuncia filtración de datos de @revistavistazo, la información correspondería a suscriptores, incluyendo información financiera y personal; no se detalla cantidad de afectados, vía @VECERTRadar

[VECERT Analyzer @VECERTRadar]

🚨 🌐 CYBER INTELLIGENCE ALERT: NEW DATA BREACHES IN LATAM 🇪🇨 🇨🇴

⚠️ HIGH PRIORITY: DETECTION OF THREAT ACTIVITY IN ECUADOR AND COLOMBIA

[STATUS: UNCONFIRMED / UNDER INVESTIGATION, EVIDENCE VISIBLE]

New cyber intelligence activity has been registered, reporting two critical cases of sensitive data exposure:

1. Case #6681: Vistazo Magazine (Ecuador 🇪🇨)
Threat actor: GondorPe.

Date: 2026-05-29.

Scope: Exposure of subscriber data, including sensitive financial and personal information.

2. Case #6677: Files | Punto Vital (Colombia 🇨🇴)
Threat Actor: Bytedope157sp.

Date: 2026-05-29.

Scope: Exposure of more than 3,000 sensitive files (records).

The documented activity reflects a wave of targeted attacks against entities that manage databases containing private user information. The exposure of "Files" at Punto Vital and subscription data at Vistazo Magazine suggests that the actors are prioritizing the acquisition of PII (Personally Identifiable Information) and medical or administrative records for illicit purposes.

🛡️ Mitigation Recommendations

Data Audit: The organizations involved should conduct an immediate technical review of their systems to verify the integrity of the databases and the potential persistence of unauthorized access.

User Protection: Users affected by these leaks are advised to actively monitor their financial accounts and emails for potential phishing or fraud attempts.

⚡ Strategic Monitoring

🌐 Intelligence System: https://t.co/wk9bZJ2Nli

🛡️ Quickly assess your website's security with: https://t.co/YnDw1QjN9c

#CyberSecurity #DataLeak #Ecuador #Colombia #Vistazo #PuntoVital #ThreatIntelligence #CiberAlerta #VECERT

[Usuarios Digitales @usuariosdigital]

@CACPEPAS @AndNoticiaCyber 🆕#AlertaDigitalEC
Se alerta de filtración de base de @CACPEPAS que contendría documentos de identificación escaneados y nombres

⚠️Alude al @RegistroCivilec, indica que datos fueron accesados a través de un endpoint proxy de consulta desprotegido

https://t.co/i62qZQvL0I

[Ecuavisa Noticias @EcuavisaInforma]

🪪 Una plataforma de ciberseguridad reportó que una base de datos con información detallada de vehículos y propietarios de Ecuador se ha filtrado. 🤳🏻 Esto coincide con el reporte de mensajes falsos que exigen el pago urgente de supuestas multas. 💻 https://t.co/R8uSvU1UB5

[Mr. Link @MrLinkEc]

Sobre el tema de Filtraciones en #Ecuador la verdad ninguna autoridad la tomará en serio filtraciones de datos, peor la que estaba desde el 3 de Abril de la ANT, ni el EcuCert alerto sobre esto, lo único que queda es que los usuarios sean cautos y tengan sentido común con los Mails y Sms suplantando a la ANT que comenzaran a llegar a lo largo del 2026.

#NoseDejenHackear 😎

[Usuarios Digitales @usuariosdigital]

#AlertaDigitalEC
Se alerta de filtración de 17 millones de registros de una base de 4gb al 2026 de @ANT_ECUADOR, vía @rocurun
La base contiene datos del propietario como nombre, email y domicilio y del vehículo como número de placa, chasis y pagos de matrícula e impuestos

[Dark Web Intelligence @DailyDarkWeb]

🎙️EXCLUSIVE: Dark Storm Team Interview

We spoke directly with the group behind recent high-profile cyber operations.

This is not endorsement. This is visibility into how they think.

⸻

Q: How would you define Dark Storm Team today, hacktivists, cybercriminals, or something else?

A: We see ourselves as a group of like-minded individuals. Today, many label all hackers as cybercriminals, but we consider ourselves hacktivists driven by ideological motivations.

⸻

Q: What differentiates you from groups like KillNet or Anonymous-affiliated actors?

A: It’s better to judge us by effectiveness. Operations targeting major platforms already demonstrate our level.

⸻

Q: Can you walk us through a recent operation?

A: We won’t disclose operational details to avoid strengthening defenses. In general, we rely on a mix of social engineering, intelligence gathering, and specialized tooling.

⸻

Q: How do you ensure your claims are credible?

A: Verification is challenging due to limited reporting, but independent cybersecurity experts have validated some of our activities.

⸻

Q: What are your primary attack methods?

A: A combination, including DDoS, exploitation, and credential access.

⸻

Q: Tools, public, private, or custom?

A: All of the above. We use open-source tools, external resources, and our own developments.

⸻

Q: How is your team structured?

A: There is leadership, but members can change. Alignment in mindset is key.

⸻

Q: What role do ideology or geopolitics play?

A: A major role. Our operations are heavily influenced by political and ideological perspectives.

⸻

Q: Are defenders getting better?

A: It varies. Strong security requires investment, not every organization prioritizes it.

⸻

Q: Most challenging targets?

A: Time constraints, defensive countermeasures, and resource limitations.

⸻

Q: How do you manage OPSEC?

A: We focus on minimizing digital footprints and maintaining strict operational discipline.

⸻

Q: How do you respond to skepticism?

A: Skepticism is natural. Attribution and impact are often difficult to prove publicly.

⸻

Q: Do you collaborate with others?

A: Yes. We work with other groups, including newer alliances like “Armenian Code.”

⸻

Q: Biggest misconception about your group?

A: That our operations are ineffective.

⸻

Q: If organizations want to avoid being targeted, what should they do?

A: (Response reflects their viewpoint), targeting decisions are influenced by multiple factors, including perceived alignment and impact.

⸻

Audience Q: Do you choose targets based on vulnerability or symbolic value?

A: We prioritize targets based on potential impact, then identify the path to reach them.

⸻

Audience Q: How do DDoS attacks impact large tech companies?

A: The objective is to bypass defenses or identify weaker parts of infrastructure.

⸻

Final Note (DDW):
This interview reflects the group’s claims and perspective. Attribution in cyber operations remains complex, and not all claims can be independently verified.

⸻

[Dark Web Intelligence @DailyDarkWeb]

🚨 BREAKING

ShinyHunters claims to have accessed internal systems linked to Anthropic’s Mythos model — sharing screenshots of:

User management panels
AI experiment dashboards
Model performance & cost analytics

⚠️ At this stage, authenticity is unverified — but if confirmed, this would be a major escalation:

AI models designed to find vulnerabilities… becoming targets themselves.

This isn’t just a breach story.
It’s a preview of the next cyber battleground: AI infrastructure.

More to come.

#CyberSecurity #AI #DataBreach #ShinyHunters #Infosec #DDW

[NotiCyber @AndNoticiaCyber]

🚨FILTRACIÓN DE DATOS | CAPCE Pastaza

Usuario en la darkweb identificado como "GondorPe" afirma haber filtrado información sensible.

📁Datos expuestos incluirían:
• Cédulas de identidad (fotos escaneadas)
• Nombres completos

📌 CAPCE Pastaza aún no se pronuncia oficialmente.