La culpa de todo esto en esta ocasión es del organismo judicial
Que suelta a los mareros, delincuentes, al viejo panzón de la zona 1. Se dijo y se tenía que decir. Cerotes
⚠️ CRITICAL PREVENTIVE ALERT 🇬🇹 ⚡: ALLEGED COMPROMISE AND EXPOSURE OF ELECTRICITY AND UTILITY BILLS IN GUATEMALA (ACTOR: RETHIXX)
[STATUS: UNCONFIRMED (VISUAL EVIDENCE PRESENT BUT NOT OFFICIALLY VERIFIED) / THREAT ACTOR: RETHIXX / DATE: OCTOBER 1, 2026]
The centralized cyber-intelligence system has detected a post on underground forums by the user "rethixx." The report announces the hacking and mass exfiltration of electricity, telecommunications, and utility bills in Guatemala, exploiting alleged security flaws in the country's commercial and institutional platforms.
It is strictly noted that the veracity of this compromise and the authenticity of the records have not been officially confirmed by the authorities or affected companies. The definitive status of the infrastructure remains unconfirmed.
Threat Actor: rethixx
Victim / Affected Entity: Electricity, internet, and commercial service providers in Guatemala (with visual evidence showing bills from entities such as EEGSA, Tigo, among others).
Sector: ⚡ Public Utilities, Electricity, Telecommunications, and E-commerce.
Exploitation Vector: IDOR (Insecure Direct Object Reference) vulnerabilities and a lack of perimeter security measures on web portals used for sales and account inquiries.
🔍 TECHNICAL BREAKDOWN OF VISUAL EVIDENCE AND ATTACK VECTOR
Attack Vector: The author indicates that payment, billing, and e-commerce websites in Guatemala lack additional security controls, allowing for the exploitation of Insecure Direct Object References (IDOR) to access users' tax documents and receipts. Visual Examples: The attached images show the display of electronic electricity and telecommunications bills (Electronic Energy Bill / FEL Invoice), revealing consumption data, amounts due (e.g., in Quetzals), and subscriber details.
🛡️ TECHNICAL PREVENTIVE CONTAINMENT RECOMMENDATIONS (SOC / CSIRT / PROVIDERS)
Access Control Audit for Billing Portals: Utility and telecommunications companies in Guatemala must immediately review authorization settings in their bill download systems to block IDOR-based access.
Implementation of Robust Authentication Mechanisms: Ensure that commercial and service web portals implement strict session validation and per-user parameter controls.
🖥️ CENTRALIZED THREAT MONITORING SYSTEM
Intelligence System: https://t.co/wk9bZJ2Nli
Quickly check your security status at: https://t.co/QZhWp0kFrO
Quotes and services: https://t.co/sx3BM5zbnK
#Cybersecurity #ThreatIntel #DataLeak #Guatemala #ElectricityBills #IDOR #InfoSec #CyberAlert #VECERT #SOC #CSIRT #Unconfirmed #SecurityAlert