unauthorised access to information systems Claim date: Date confidence: Medium

Acceso limitado al panel SmartOLT de Fibex confirmado por la empresa

El acceso a un panel SmartOLT asociado a Fibex fue mostrado en un video de 65 segundos publicado por x00x01x01 el 7 de abril de 2026, con métricas, nodos OLT y detalles de dispositivos. Gustavo Córdoba, director de infraestructura y redes IP de Fibex, declaró a Telecomunicaciones360 que el video era real y que una cuenta con acceso de lectura permitió ver datos de clientes, servicios, velocidades y direcciones en una solución de terceros. Afirmó que no hubo compromiso del núcleo, datos financieros ni privilegios para desactivar clientes y que se aplicaron correctivos. No se confirmaron exfiltración, interrupción, el alcance de 390.000 usuarios, el supuesto enrutamiento/DPI mediante CANTV ni el mecanismo exacto de obtención de credenciales.

Overview

Missing evidence

informe técnico o publicación directa de Fibexlogs de autenticación y alcance exacto de la cuenta SmartOLTmecanismo y responsable de la posible entrega de credencialesevidencia de extracción o publicación de datosconteo verificable de clientes cuyos datos fueron visiblestelemetría de interrupción o facultad efectiva de modificar/desactivar clientesevidencia técnica del supuesto enrutamiento o DPI mediante CANTV

Impact details

El video muestra métricas, nodos OLT y detalles de dispositivos en SmartOLT. El director de infraestructura de Fibex confirmó el acceso y dijo que una cuenta de lectura permitía ver datos de clientes, servicios, velocidades y direcciones, pero no datos financieros ni facultad de modificar o desactivar clientes. No se confirmó extracción, publicación de datos, impacto a 390.000 usuarios, compromiso del núcleo, DPI/CANTV o interrupción.

datos de clientes visibles en la cuenta de lecturaservicio contratadovelocidad de conexióndirecciónplataforma de terceros SmartOLTpanel de gestión y monitoreo GPON/OLT

Classification & severity

Category
Intrusions
Subtype
unauthorised access to information systems
Confidence
Medium

El video visible y la declaración nominal del director de infraestructura de Fibex sustentan acceso limitado a la solución de terceros SmartOLT. No demuestran compromiso del núcleo, control administrativo total, exfiltración o interrupción.

Severity assessment

Medium
Functional impact
None
Information impact
Personal data
Affected scope
Multiple users
Critical service
Potential
Public confidence
Moderate

Existe evidencia pública y confirmación nominal de acceso limitado con visibilidad de datos, pero no de modificación, corte, extracción, datos financieros o compromiso del núcleo. El alcance exacto permanece desconocido.

Confidentiality

Timeline

Claim

x00x01x01 publicó el reclamo y un video de 65 segundos que muestra un panel SmartOLT asociado a Fibex; la fecha documenta la publicación, no el acceso inicial.

Update

Gustavo Córdoba, director de infraestructura y redes IP de Fibex, confirmó que el video era real y describió acceso de lectura a SmartOLT, pero negó compromiso del núcleo, datos financieros o privilegios para desactivar clientes.

Evidence & sources

7 sources
Context Media report Source confidence: Low

What this source supports

  • La Patilla republished the x00x01x01/SmartOLT allegation and explicitly credited CriptoNoticias
  • the page reports the claimed 390,000 scope and DPI/CANTV allegation as claims

Evidence limits

Explicit syndicated copy of CriptoNoticias. It adds no independent technical validation and overstates exposure/control in the headline.

Relevance to this case

Documents circulation of the actor/VECERT claim, not independent confirmation of access, affected users, DPI, exfiltration or outage.

Corroborating Media report Source confidence: Medium

What this source supports

  • CriptoNoticias reported the x00x01x01 SmartOLT video and VECERT alert on 8 April
  • the article preserves the actor text and alleges customer-name visibility, 390,000-user scope and DPI/CANTV routing

Evidence limits

Secondary reporting based on the actor and VECERT. Its own copy does not establish credential path, privilege level, dataset extraction, outage or DPI/CANTV routing.

Relevance to this case

Preserves the early public narrative and exact actor embed; the later victim-representative interview supplies the stronger scope correction.

Context Media report Source confidence: Low

What this source supports

  • DiarioBitcoin repeated the VECERT/x00x01x01 SmartOLT claim on 8 April
  • the article expressly notes the lack of detailed technical information and confirmed outage

Evidence limits

AI-labelled, derivative coverage with no independent telemetry, victim artifact or forensic validation. Its X image is editorial.

Relevance to this case

Documents secondary circulation and acknowledged evidentiary limits only.

Context Media report Source confidence: Medium

What this source supports

  • the 7 April report documents contemporaneous circulation of the SmartOLT video and actor/VECERT claims
  • the report relays that Fibex said services were operating normally
  • consulted specialists disputed that ordinary CANTV interconnection alone established covert DPI

Evidence limits

Contemporaneous secondary report. Its claims of broad control and exposure are corrected by the named Fibex representative interviewed the next day.

Relevance to this case

Supports publication timing, video circulation and the reported no-outage response, not a 390,000-user impact or DPI finding.

Contradiction Media report Source confidence: High

What this source supports

  • Fibex infrastructure and IP-networks director Gustavo Córdoba said the video was real and the access concerned third-party SmartOLT
  • the representative said customer, service, speed and address data were visible to a read-only account
  • he denied core-network compromise, financial-data access and privileges to deactivate customers and said corrective action was taken

Evidence limits

Strongest stored source because it contains an on-record victim-representative interview, but it is not a first-party technical report and provides no logs or credential evidence. The possible employee-credential path remains an assessment.

Relevance to this case

Directly supports limited access/data visibility and the explicit limits that reject the broader actor/media narrative.

Hackeo a Fibex Venezuela: más de 390.000 usuarios expuestos

Grupo Apok / José M. Yndriago Apr 9, 2026
Context Media report Source confidence: Low

What this source supports

  • Grupo Apok repeated the VECERT/actor SmartOLT, 390,000-user and DPI/CANTV narrative
  • the page embedded the exact VECERT and non-specific Next posts

Evidence limits

Derivative commercial/SEO coverage that overstates central-system control and treats unverified DPI and outage capability as facts.

Relevance to this case

Documents later circulation only; it is not independent incident corroboration.

x00x01x01 Fibex/SmartOLT claim and 65-second video

x01x00 (@x00x01x01) / X Apr 7, 2026
Primary Threat actor claim Source confidence: Medium

What this source supports

  • the exact account publicly made the Fibex/CANTV/DPI claim on 7 April
  • the attached 65-second video visibly traverses a SmartOLT dashboard, OLT-node list and device-detail pages associated with Venezuelan locations

Evidence limits

Actor-controlled evidence proves publication and what the interface video visibly depicts, not authorization status, authenticity, credential origin, privilege level, exfiltration, outage, 390,000 affected users or DPI/CANTV routing. The victim-representative interview supplies the scope correction.

Relevance to this case

Strongest primary provenance for the public claim and video; use together with the named Fibex representative, not as standalone proof of the broader assertions.