CiberLATAMbywhalemate

#SockTz

This tag brings together CiberLATAM’s coverage of activity, techniques, and indicators tied to SockTz across Latin America’s cybersecurity landscape. It collects analysis, reporting, and ongoing monitoring to show how this threat evolves, which tactics it uses, and what it means for defenders and incident response teams.

Mexico, Brazil, Ecuador in CL-CRI-1131, 1163

Unit 42 tracked two AI-assisted intrusion clusters in Mexico, Ecuador and Brazil, using NextChat, Claude

Sep 7, 2026 · 38 min

Unit 42 Tracks CL-CRI-1131

Unit 42 found two AI-linked clusters targeting governments, water, and banks in Mexico, Ecuador, and Brazil since February 2026.

Sep 7, 2026 · 36 min