Threat actor

Cyber Hunters

Cyber Hunters is a hacktivist collective linked to #OpVenezuela and collaborating with Anonymous/GhostSec. Their claims should be deduplicated by incident because some targets are published under different accounts or affiliates.

Incidents
4
High impact
3
First seen
Jul 28, 2024
Latest seen
Aug 13, 2024

Linked incidents

unconfirmed actor claim

Cyber Hunters Claims Responsibility for Attack on the Central Bank of Venezuela (BCV)

On August 13, 2024, Cyber Hunters claimed to have gained control of or access to systems linked to the Central Bank of Venezuela and to be reviewing transactions, bonds, and payment triangulations. The press reported on the group’s statement, and official reports mentioned the BCV as part of the wave of cyberattacks; however, no official or forensic confirmation was found regarding access to the financial system, data exfiltration, verifiable publication of records, or operational damage associated with this claim.

Banco Central de Venezuela (BCV)
Distributed denial of service

Cyber Hunters Claims Responsibility for Attack on the Consulate General of the Bolivarian Republic of Venezuela in Madrid

White_Hunters/Cyber Hunters claimed responsibility for a DDoS attack against the Consulate General of Venezuela in Madrid. The target-specific evidence is the actor’s archived claim; no confirmation from the consulate or independent telemetry was found.

Consulado General de la República Bolivariana de Venezuela en Madrid
Leak of confidential information

Unidentified actor claims responsibility for an attack on the General Directorate of Military Counterintelligence (DGCIM)

Sources from various actors and media outlets reported a data leak attributed to Anonymous/MS BOTNET/Cyber Hunters containing classified data from the CNE, SEBIN, and DGCIM. For the DGCIM, the authenticity, exact volume, and origin have not been forensically validated.

Dirección General de Contrainteligencia Militar (DGCIM)
Distributed denial of service

DDoS-type cyberattack against the National Electoral Council (CNE) websites during the June 28 presidential election

Team Cymru observed a traffic spike consistent with a DDoS attack against the IP address hosting the CNE portals (SAFE/SICOFPE) for approximately 34 minutes on July 28, 2024. The analysis does not support the alleged hacking of the vote count or the official attribution to North Macedonia; the confirmed impact is the unavailability of the portals.

Consejo Nacional Electoral (CNE)