leo chuquiguanca

Cybersecurity Research | Digital Forensic | Cybercrime Investigator | Free-software activist | BSC | Heavy Metal

[leo chuquiguanca @lrafael696]

Acá mi contacto de PGP
7DA4CAA8F89AD79571C60E4F648EEF884A9EB310

[elhacker.NET @elhackernet]

🛠️ RedAmon, una nueva plataforma de seguridad ofensiva de código abierto que redefine las pruebas de penetración automatizadas.

Diseño modular y basada en Docker integra en un único flujo de trabajo el reconocimiento, la explotación, la post-explotación, el triaje mediante IA
https://t.co/4vmcH23htD

[Kali Linux @kalilinux]

Kali Linux 2026.2 Release (GNOME 50, KDE 6.6, Helper Scripts, APT Formats & VM Boot Tweaking): It’s the final week of Q2, and Kali Linux 2026.2 is here - right on schedule ;) We have been heads down since our last release, and we are ready to share what… https://t.co/kv4knEBCQs

[leo chuquiguanca @lrafael696]

😑 otra vez...

[Dark Web Intelligence @DailyDarkWeb]

🇪🇨 [NATIONAL ID BREACH CLAIM] Ecuador – DIGERCIC

A threat actor is claiming a massive breach of Ecuador’s civil registry (DIGERCIC) system.

Claimed impact:
• Target: Dirección General de Registro Civil (Ecuador)
• Records: 14.8 million individuals
• Images: 10.6 million (high-definition)
• Data type: National ID / civil registry information

⚠️ Initial assessment:
• If accurate, this represents near population-scale exposure
• Likely includes:
• Full names
• National ID numbers (cédula)
• Birth records
• Biometric / ID photos

Risk perspective:
• Critical national security + identity risk
• Enables:
• Identity theft at scale
• Synthetic identity creation
• Election / fraud manipulation scenarios
• Cross-border criminal abuse

• High-quality images → potential facial recognition misuse

Red flags / considerations:
• Actor uses hype language (“completely breached”)
• No verifiable structured sample shown
• Volume (14.8M) roughly aligns with Ecuador population → plausible but needs validation

• Joint operation claim → possible:
• Collaboration branding
• Or credibility inflation

🔐 Recommended actions:
• Treat as HIGH PRIORITY – requires immediate validation
• Monitor:
• Sample releases
• Government response
• Secondary forum confirmations

• For organizations:
• Increase fraud monitoring for Ecuador-based identities
• Watch for credential stuffing / identity reuse patterns

Current status: Unverified – HIGH impact if confirmed

#DDW #Intelligence #DataBreach #CyberThreat #IdentityTheft #OSINT

[leo chuquiguanca @lrafael696]

Nueva filtración de datos, ahora del RC.

[VECERT Analyzer @VECERTRadar]

🚨 CRITICAL CYBERINTELLIGENCE ALERT: MASSIVE NATIONAL IDENTITY BREACH – DIGERCIC ECUADOR 🇪🇨👤📂🔓 [STATUS: EXTREME THREAT]

A catastrophic compromise has been detected within the infrastructure of Ecuador's General Directorate of Civil Registry, Identification, and Cedulation (DIGERCIC). Threat actor "GordonFreeman," operating under the collective L4TAMFUCKERS, claims to have completely breached the national system, exfiltrating the identity data of virtually the entire population holding national ID cards.

🏢 Affected Entity: DIGERCIC (Ecuador's Civil Registry).

👤 Threat Actors: GordonFreeman, Izanagi, and YoSoyGroot (L4TAMFUCKERS).

📂 Compromised Assets: SQL database and a massive repository of identification images.

📊 Leak Volume:

14.8 million data records (10.8 GB in SQL).

10.6 million high-definition images of national ID cards (165 GB).

📅 Publication Date: May 4, 2026.

📊 Breach Scope (PII and Facial Biometrics)

The magnitude of this attack implies that the attackers possess the capability to reconstruct the legal identity of the majority of Ecuadorian citizens:

Alphanumeric Data: Full names, national ID numbers, dates of birth, marital status, digitized fingerprints, and signatures.

Visual Evidence: The 10.6 million HD images correspond to facial photographs captured for the issuance of identity documents, thereby enabling biometric impersonation attacks.

Infrastructure: The use of SQL dumps suggests deep-level access to the Civil Registry's master tables.

🛡️ Immediate Response Recommendations

🔒 Isolation of Critical Servers: DIGERCIC must declare a state of cybersecurity emergency and audit all data exfiltration points within its internal networks.

🔑 Financial System Alert: Banks and credit unions in Ecuador must enhance their identity verification protocols, exercising caution regarding validations based solely on photos of national ID cards.

Monitor: https://t.co/wk9bZJ3laQ

#CyberSecurity #Ecuador #DIGERCIC #DataBreach #L4TAMFUCKERS #RegistroCivil #Identity #PII #VECERT #InfoSec 🇪🇨🛡️⚠️🚨👤

[leo chuquiguanca @lrafael696]

https://t.co/0mMg0gv4cR

[leo chuquiguanca @lrafael696]

@JAGonzalvear A

[Alberto @alozanox89]

Guía Completa: pfSense con DDNS de Cloudflare, Certificados Let’s Encrypt y HAProxy para Proxy Inverso y Balanceo de Carga de servicios https://t.co/d9Ae5y3eOz

[Es Geeks @EsGeeks]

Viper, la alternativa gratuita y open-source a Cobalt Strike. Potencia tus operaciones Red Team con su agente LLM integrado, evasión de defensas y soporte multiplataforma.

🐍🤖 [#ViperC2 #HackingEtico #RedTeam #Ciberseguridad #IA #LLM #AI #EquipoRojo]

[Contraloría Ecuador @ContraloriaECU]

📣 #ComunicadoOficial

[Contraloría Ecuador @ContraloriaECU]

🔇 #ComunicadoOficial

[INCIBE @INCIBE]

🚀¿Quieres especializarte en ciberseguridad? Apúntate al curso presencial y gratuito de INCIBE y la ULE del 24 de noviembre al 05 de diciembre.

🎓1,7 créditos ECTS

¡Inscríbete ya!🏃‍♂️
https://t.co/HquOZe3nnE
#Ciberseguridad #INCIBE #ULE #CursoGratis

[leo chuquiguanca @lrafael696]

https://t.co/mutJyia9rJ

[TCM Security @TCMSecurity]

Curious about hacking APIs? This video can guide you how to get started in the crucial area of web app #pentesting.

Watch it here: https://t.co/6kZziKvbyU

[DFIR Training @DFIRTraining]

TERABYTES OF FORENSIC TEST IMAGES
HUNDREDS OF CTFs
https://t.co/dsUPfRNMxH #DFIR #CTF

[Chema Alonso @chemaalonso]

El lado del mal - WhatsApp Forensics: El time-line de los mensajes de "View Once "en WhatsApp Desktop (Incluso en los chats que desaparecen) https://t.co/IcRiLEofeS #WhatsApp #Leak #Privacidad #Forense #Forensics #OSINT

[TCM Security @TCMSecurity]

As you refine your skillset with CTFs, don't forget about our Academy! It has 20+ courses that will shape you into a better pentester. https://t.co/P7eDiPwMet

Looking to become more involved with capture-the-flag competitions AKA #CTFs? Here are a few pointers to help you on your way, and some recommendations for why and how to start.

𝗪𝗵𝘆 𝘀𝗵𝗼𝘂𝗹𝗱 𝗜 𝗱𝗼 𝗖𝗧𝗙𝘀? CTFs are clearly a way to refine your pentesting skillset, but let's be more specific. CTFs help participants develop their troubleshooting skills, learn about the underlying technologies they are testing, encourage learning in a safe environment, and can really appeal to people with a more competitive edge.

𝗪𝗵𝗮𝘁 𝗱𝗼 𝗜 𝗹𝗲𝗮𝗿𝗻? You can learn to use scripting languages like Python to automate tasks during the CTF, and you can get more familiar with popular pentesting tools like Burp Suite.

𝗥𝗲𝗮𝗱𝘆 𝘁𝗼 𝘀𝘁𝗮𝗿𝘁? Choose any of the numerous beginner-friendly CTFs! Popular CTFs include OvertheWire, RootMe, and PicoCTF. Be sure to bookmark https://t.co/2r7sl7kYKU if you decide you really want to go further with CTFs.

[CEDIA @CEDIAec]

¡Call for Papers! Sé protagonista de la 1era revista científica CEDIA. Publica tu innovación. Envía tu artículo y haz que tu trabajo forme parte de esta primera edición histórica.

[Md Ismail Šojal 🕷️ @0x0SojalSec]

APK TOOL GUI Tools: easier for reverse engineering and Android pentesting

- https://t.co/g8qV8Ljyb9

#infosec #cybersec #bugbountytips

[TryHackMe @tryhackme]

👩‍💻 SOC Analyst vs. Penetration Tester 🕵️‍♂️

Here we break down the key differences between the two roles and the mindset you’ll need for each!

Different responsibilities. Different ways of thinking. Both essential to cyber security!

Wherever you see yourself, TryHackMe has you covered with a dedicated learning path to get you started! 😉

➡️ SOC Level 1: https://t.co/H8k5RwaFqw
➡️ Jr Penetration Tester: https://t.co/qxR60STC2m