service disruption claim Claim date: Date confidence: Medium

Presunto compromiso del portal de la DGCIM atribuido a Cyber Hunters

El presunto compromiso del portal de la DGCIM formó parte de un reclamo de @White_Hunters del 5 de agosto de 2024, atribuido a #CyberHuntersOp y Anonymous y referido a cinco portales militares venezolanos. Una de sus cuatro capturas mostró que Check-Host devolvía principalmente “Connection refused” y algunos timeouts para http://www.dgim.mil.ve. Una publicación periodística reprodujo el mismo reclamo ese día. La publicación y la captura preservan una observación controlada por el reclamante, pero no demuestran DDoS, intrusión, causalidad, duración ni impacto operativo. Las fuentes que hablan de una base de datos DGCIM corresponden a un evento de filtración registrado por separado.

Overview

Missing evidence

declaración oficial de DGCIM o del Ministerio de Defensareporte permanente y datos crudos de Check-Host con marca temporaltelemetría independiente y línea base histórica de www.dgim.mil.vevolumen, protocolo o infraestructura que demuestre DDoSduración, usuarios, funciones o sistemas internos afectadosevidencia forense que vincule al reclamante con el resultado

Impact details

La captura del reclamante mostró conexiones rechazadas/timeouts para el portal público de DGCIM. Sin reporte permanente, línea base, marca temporal visible, medición independiente o declaración oficial, no se confirma una interrupción atribuible al actor, su duración, usuarios o funciones afectados, ni acceso a sistemas internos o datos. La filtración DGCIM se registra por separado.

portal web público www.dgim.mil.ve, según el reclamo

Classification & severity

Category
Availability
Subtype
service disruption claim
Confidence
Low

El post exacto y una captura muestran un reclamo target-specific y fallos de conexión presentados por el actor. No hay medición independiente, telemetría, duración, prueba de intrusión ni mecanismo DDoS.

Severity assessment

Low
Information impact
None
Affected scope
Organization-wide
Critical service
Potential
Public confidence
Limited

DGCIM es una entidad sensible, pero la sensibilidad de la víctima no sustituye evidencia de impacto. Solo existe un reclamo y una captura de disponibilidad sin duración, funciones afectadas, acceso interno o daño de datos.

Timeline

Claim

@White_Hunters afirmó que cinco sitios militares habían sido comprometidos y adjuntó una captura de Check-Host para www.dgim.mil.ve con conexiones rechazadas/timeouts. La captura no demuestra DDoS, intrusión, causalidad ni duración.

Evidence & sources

8 sources
Context Media report Source confidence: Low

What this source supports

  • the URL and metadata title describe an alleged 11,000-record CNE/SEBIN/DGCIM leak
  • the current visible heading and body instead reproduce a broad 325-site campaign story and never substantively describe DGCIM
  • embedded statuses concern an aggregate campaign and CICPC, not DGCIM availability
  • the page does not support a DGCIM DDoS or the 5 August target-specific claim

Evidence limits

The current page is internally inconsistent: its metadata/URL retain a DGCIM leak headline, while the rendered body is a different aggregate campaign story.

Relevance to this case

Retained only to identify and separate the DGCIM leak claim from this later availability claim.

Context Security research Source confidence: High

What this source supports

  • Check Point documents the broad post-election #OpVenezuela campaign and collective DDoS claims
  • the report names Presidency and ministry sites but does not name DGCIM or dgim.mil.ve
  • none of the six figures depicts DGCIM
  • the report cannot corroborate this target-specific event

Evidence limits

High-quality campaign context, but the target is absent from both text and figures.

Relevance to this case

Context for the participating groups and campaign only; rejected as DGCIM-specific corroboration.

Context Media report Source confidence: Medium

What this source supports

  • La Cuarta reports that a DGCIM database was hacked and published
  • it reports a Presidency-site claim and a broad 45-site campaign separately
  • it does not say that the DGCIM portal was unavailable or targeted by DDoS
  • its exact embedded posts concern Presidency and a generic political campaign, not DGCIM

Evidence limits

The outlet gives no primary DGCIM dataset, target-specific availability observation or technical evidence.

Relevance to this case

Retained only to separate the DGCIM data-leak allegation from this portal-availability claim.

Corroborating Media report Source confidence: Medium

What this source supports

  • 20minutos says activists claimed sabotage of more than 325 institutional portals including DGCIM
  • the target list is explicitly attributed to El Mundo and supplies no target-specific measurement
  • the article separately reports a government aggregate in which 65 percent of 25 institutions involved denial of service
  • the aggregate percentage cannot establish DDoS against DGCIM

Evidence limits

Derivative aggregate reporting; it neither identifies when DGCIM was tested nor supplies a result, duration or mechanism.

Relevance to this case

Corroborates that DGCIM appeared in later campaign reporting, not a verified DDoS or impact.

Anonymous declara la guerra a Maduro

Raúl González / AS Aug 14, 2024
Corroborating Media report Source confidence: Medium

What this source supports

  • AS says activists claimed sabotage of more than 325 institutional portals including DGCIM
  • the list is credited to El Mundo and provides no DGCIM-specific telemetry
  • the embedded YourAnonCentral post concerns an alleged hidden financial network and does not mention DGCIM or site availability
  • the article does not establish DDoS, intrusion or operational impact at DGCIM

Evidence limits

Derivative article relying on El Mundo for the aggregate target list; the only embedded exact post is unrelated to DGCIM availability.

Relevance to this case

Secondary corroboration that DGCIM appeared in an aggregate campaign list, with no target-specific technical support.

Anonymous le declara la “ciberguerra” a Nicolás Maduro

Cristian Flores / Imagen Poblana Aug 14, 2024
Corroborating Media report Source confidence: Low

What this source supports

  • Imagen Poblana repeats that more than 325 portals including DGCIM were affected
  • it supplies no source, target-specific observation or technical detail for DGCIM
  • its exact embedded post concerns financial allegations and does not mention DGCIM
  • the article does not prove site outage, DDoS, intrusion or impact

Evidence limits

Low-transparency derivative account without a named source for the DGCIM list; visible author and metadata publisher identities also differ.

Relevance to this case

Weak corroboration of an aggregate campaign mention only.

Anonymous y Cyber Hunters derriban sitios de las Fuerzas Armadas de Venezuela

Ignacio Gómez Villaseñor / Publimetro México Aug 5, 2024
Corroborating Media report Source confidence: Medium

What this source supports

  • Publimetro reports Cyber Hunters' claim that five Venezuelan armed-forces sites, including DGCIM, were compromised
  • the page embeds the exact @White_Hunters post and identifies the DGCIM attachment
  • the claim and screenshots support public provenance and an actor-presented reachability failure, not DDoS, compromise or causal attribution

Evidence limits

The article principally repeats actor statements and does not independently test DGCIM or authenticate the screenshots.

Relevance to this case

Strongest media provenance connecting DGCIM to the exact later actor claim and attachment.

Primary Threat actor claim Source confidence: Medium

What this source supports

  • @White_Hunters claimed that CyberHuntersOp and Anonymous had compromised Venezuelan armed-forces sites
  • one attached Check-Host screenshot is specifically for http://www.dgim.mil.ve
  • the DGCIM screenshot visibly shows mostly connection refused and some connection timed out results across international locations
  • the post and actor-controlled screenshot do not prove DDoS, intrusion, cause, continuous duration or operational impact

Evidence limits

Actor-controlled screenshots omit a timestamped permanent Check-Host result, raw telemetry, baseline and evidence linking the claimant to the observed condition.

Relevance to this case

Exact primary source for the 5 August target-specific claim and its availability-looking attachment.