Excluded / contextual

Outside the main registry and its statistics

Multi-incident summary

Grouped GlorySec claim concerning dozens of sites. Context overlaps TuTicket (2bhI3LRJ6nTy07BbhPWuI); excluding the aggregate from counts avoids counting both campaign and individual case.

unverified actor claim Claim date: Date confidence: Low

Presunta toma de más de 50 sitios web venezolanos atribuida a GlorySec

La presunta toma de más de 50 sitios web venezolanos en #OPVenezuela fue atribuida a GlorySec en una publicación y su réplica en X del 28 de mayo de 2024. El artículo visible enumera 43 nombres, mientras un informe semanal registra la cifra como 50. Las fuentes documentan el reclamo público, no acceso ni modificación comprobados: no hay confirmación de las entidades, archivo independiente por cada sitio, telemetría, duración, indisponibilidad o prueba de extracción o filtración de datos. Permanece excluido como reclamo agregado de campaña, sin representar 50 incidentes verificados.

Overview

Missing evidence

publicación primaria autenticada de GlorySec con fecha y lista completadominio y artefacto legible o archivo independiente para cada objetivoconfirmación de cada entidad o proveedor afectadotelemetría o informe técnico que demuestre acceso, alteración, vector y duraciónprueba específica de indisponibilidad, extracción, datos publicados, personas o pérdidas

Impact details

GlorySec fue citado afirmando la toma e indisponibilidad de sitios y amenazando con publicar datos supuestamente recuperados. No se confirmó acceso, modificación, indisponibilidad, extracción, datos, duración, personas ni pérdidas para ningún objetivo. El estado del servicio permanece sin confirmar.

50 o más sitios web venezolanos según el reclamo; 43 nombres visibles en el artículo

Classification & severity

Category
Undetermined
Subtype
unverified actor claim
Confidence
High

La existencia del reclamo agregado está bien documentada por publicaciones contemporáneas, pero ninguna valida acceso, modificación o indisponibilidad de los sitios enumerados. Por ello no se clasifica como 50 compromisos ni como desfiguración confirmada.

Severity assessment

Information impact
Suspected
Critical service
None
Public confidence
Limited

El conteo, los objetivos y todos los efectos técnicos siguen siendo reclamos no validados. El registro agregado no permite inferir alcance real o severidad para ninguna entidad.

Data exfiltration· Claimed

Timeline

Claim

La afirmación atribuida a GlorySec de haber tomado más de 50 sitios venezolanos en #OPVenezuela circuló en un artículo y un post de X del mismo editor. El artículo visible enumera 43 nombres y no valida técnica o individualmente ningún objetivo.

Publication

Cipher xMDR/Prosegur publicó un informe semanal que registró el reclamo como acceso de GlorySec a 50 sitios de empresas venezolanas; no incluyó lista, fuente primaria ni validación técnica.

Evidence & sources

5 sources
Primary Media report Source confidence: Medium

What this source supports

  • Daily Dark Web published a GlorySec-attributed claim of seizing more than 50 Venezuelan websites under #OPVenezuela
  • the article visible list contains exactly 43 names despite calling it comprehensive and saying more than 50
  • the article attributes offline status and a 48-hour threat to publish recovered data to GlorySec
  • the article does not independently validate any target, access, modification, outage or data recovery

Evidence limits

Secondary publication of an actor-attributed campaign statement. Its “over 50” count is not reconciled with the 43 visible names, and it provides no primary post, independent victim statement, per-site artifact, archive or telemetry.

Relevance to this case

Strongest detailed record of the exact May 2024 aggregate claim and visible target list; evidence of publication, not of the claimed compromises.

Campaña #OpVenezuela renovada tras las elecciones de julio de 2024

Check Point Research / Tomer Spungin Aug 13, 2024
Context Security research Source confidence: High

What this source supports

  • Check Point documents a renewed post-election #OpVenezuela campaign beginning after 28 July 2024
  • the article attributes a later Venezuelan Communist Party account claim to GlorySec
  • the article does not mention or corroborate the May claim about 50 or more private websites

Evidence limits

Authoritative secondary research for the later campaign phase, but temporally and substantively separate from this May aggregate claim.

Relevance to this case

Retained only to distinguish a later reuse of #OpVenezuela and prevent its evidence from being misapplied to the May claim.

Attribution Security research Source confidence: Medium

What this source supports

  • SOCRadar profiles GlorySec as a hacktivist group whose claims include defacement, DDoS, leaks and access
  • the profile says the group shifted focus toward Venezuela and emphasizes defacement
  • the profile explicitly cautions that assertive claims may be inaccurate
  • the page does not identify or validate the May 50-site campaign

Evidence limits

A later general profile based heavily on the group public channels. It provides actor context, not independent campaign attribution or incident confirmation.

Relevance to this case

Retained as claim-aware actor context only; it cannot support the May count, target list or technical impact.

Corroborating Social media Source confidence: Medium

What this source supports

  • the exact post says GlorySec seized more than 50 Venezuelan websites under #OPVenezuela
  • the post links the Daily Dark Web article
  • the post documents the publisher circulation of the claim rather than independent verification

Evidence limits

This exact post and the article are the same publisher/claim family, not two independent confirmations. The attached actor-branded aggregate art contains no technical or per-target validation.

Relevance to this case

Exact contemporaneous social publication of the aggregate claim and date; not proof that any site was compromised.

Adversarially Weekly Report — 23–30 May 2024

Cipher xMDR / Prosegur Ciberseguridad May 31, 2024
Corroborating Security research Source confidence: Medium

What this source supports

  • page 5 says GlorySec gained access to 50 websites of various Venezuelan companies during #OPVenezuela
  • the PDF independently publishes the campaign claim and number 50 within the same reporting week
  • the report supplies no target list, primary claimant reference, technical artifact or access validation

Evidence limits

Professional secondary reporting but no cited primary post, target detail, telemetry or methodology. It corroborates publication of the claim, not actual access to 50 sites.

Relevance to this case

Added as the only independent professional publication found for the contemporaneous 50-site campaign claim.