website outage or take down Estimated start: Date confidence: Medium

Indisponibilidad del portal de Presidencia con un reclamo de Cyber Hunters

La indisponibilidad de presidencia.gob.ve fue observada por un medio el 1 de agosto de 2024 y otro informó el 2 de agosto que comprobó que ese portal y otros de una lista no podían visualizarse dentro ni fuera de Venezuela. Antes, el 31 de julio a las 21:12 VET, @White_Hunters había atribuido el derribo a CyberHuntersOp y adjuntado una captura de Check-Host con tiempos de espera desde múltiples ubicaciones. El 12 de agosto, la ministra Gabriela Jiménez incluyó los servicios de la Presidencia entre las instituciones principalmente atacadas desde el 28 de julio, pero el 65 % de denegación de servicio que comunicó corresponde al conjunto de ataques. Las fuentes respaldan indisponibilidad puntual y un reclamo de autoría, no demuestran que el incidente específico fuera DDoS, su duración continua ni la causalidad técnica.

Overview

Missing evidence

telemetría o logs de presidencia.gob.ve que identifiquen el mecanismo y volumenURL permanente y datos crudos del reporte Check-Host mostradohora de restauración, continuidad y duración totalfunciones, trámites o usuarios concretos afectadosatribución técnica independiente a CyberHuntersOp/Anonymousevidencia de confidencialidad, integridad o acceso interno

Impact details

La captura del actor y las comprobaciones independientes de ENTER.CO y El Estímulo respaldan indisponibilidad puntual del portal público. No se conoce continuidad, duración, número de usuarios, funciones gubernamentales afectadas, acceso interno, alteración o exposición de datos.

portal web público presidencia.gob.ve

Classification & severity

Category
Availability
Subtype
website outage or take down
Confidence
High

La captura contemporánea del reclamo muestra timeouts desde múltiples ubicaciones y ENTER.CO y El Estímulo informaron comprobaciones independientes en días sucesivos. Esto respalda indisponibilidad del portal, pero no el subtipo DDoS: el 65 % oficial corresponde a la campaña agregada y no existe telemetría por objetivo.

Severity assessment

Low
Functional impact
Denial (non-critical)
Affected scope
Organization-wide
Public confidence
Limited

Se observó indisponibilidad de un portal presidencial público, pero no se documentó interrupción de funciones gubernamentales críticas, duración continua, usuarios afectados, pérdida de datos o costo. La criticidad nominal de la entidad no eleva por sí sola el impacto demostrado.

Reported disruption Availability

Timeline

Claim

Cyber Hunters afirmó que había derribado presidencia.gob.ve y publicó una captura de Check-Host con timeouts desde múltiples ubicaciones. La imagen demuestra una falla puntual de alcance, no DDoS ni causalidad.

Discovery

ENTER.CO informó que verificó que el sitio oficial de la Presidencia estaba caído al publicar. No proporcionó sonda, duración ni causa técnica y distinguió a Cyber Hunters OP del rótulo no autenticable Anonymous.

Discovery

El Estímulo informó que comprobó que el portal de la Presidencia y las demás páginas enumeradas no podían visualizarse dentro ni fuera de Venezuela. No publicó sondas, continuidad ni causa técnica.

Disclosure

Gabriela Jiménez incluyó los servicios de la Presidencia entre las instituciones principalmente atacadas desde el 28 de julio y comunicó estadísticas agregadas: 25 afectadas, 40 investigadas y 65 % de ataques de denegación de servicio.

Evidence & sources

7 sources
Corroborating Media report Source confidence: Medium

What this source supports

  • the article says institutions including the Presidency had been under attack since 28 July and attributes the statement to minister Gabriela Jiménez
  • it accurately reports the official aggregate of 25 affected institutions, 40 under investigation and 65 percent denial-of-service attacks
  • the aggregate attack-type percentage does not establish that the Presidency incident itself was DDoS
  • the article also cites NETSCOUT campaign-level observations that principally concerned a telecommunications provider rather than this exact host

Evidence limits

Government-aligned synthesis of an official presentation. It names the Presidency but does not map the aggregate DDoS percentage, telemetry, duration or a specific outage to that target.

Relevance to this case

Target-specific official-claim corroboration and campaign context; not technical proof of target-specific DDoS or actor identity.

Corroborating Media report Source confidence: High

What this source supports

  • El Estímulo names the Presidency portal in the Cyber Hunters list and states that, at publication time, it independently confirmed none of the listed government pages could be viewed from inside or outside Venezuela
  • the article supports point-in-time website unavailability on 2 August and contemporaneous actor claims, not continuous downtime, DDoS or technical causality
  • the embedded posts are campaign context: 1819026327938170920 links a Publimetro list; 1819231034460061917 repeats an aggregate 325-site claim; 1819222944171667622 is political messaging; its quoted 1819230517708882210 specifically names CICPC
  • the article's phrase '31 de agosto' is an evident chronology error in a page published on 2 August and is not used as an incident date

Evidence limits

The outlet reports its own reachability check but supplies no raw probes, exact check time, status history or cause. It cannot distinguish DDoS from another source of unavailability.

Relevance to this case

Additional independent target-specific observation of public-website unavailability during the claimed campaign.

What this source supports

  • later report says hacktivists claimed more than 325 institutional portals including the Presidency
  • its Presidency assertion is attributed to El Mundo and actor profiles rather than independent measurement
  • separate official comments in the article concern Conviasa and metro fare-card systems, not the Presidency portal
  • it does not establish the exact incident date, mechanism, outage duration or actor causality

Evidence limits

Published two weeks later and derivative for this target; no raw availability observation or technical evidence.

Relevance to this case

Retained as later campaign context that explicitly names the Presidency, with low evidentiary weight for this incident.

Ministra Gabriela Jiménez: 65 % de ciberataques fueron al servicio de Internet

Partido Socialista Unido de Venezuela (PSUV) Aug 12, 2024
Context Official statement Source confidence: Medium

What this source supports

  • PSUV reports minister Gabriela Jiménez's aggregate statement that 65 percent of attacks were denial of service, with servers, international links, 25 government institutions and state platforms affected since 28 July
  • its named list includes CNE, Ministerio Público, SENIAT, CICPC, PDVSA, BCV, TSJ and Conviasa but does not include the Presidency
  • the article therefore supports official campaign context but not a Presidency-specific DDoS classification or outage

Evidence limits

The live page is unavailable and the archive contains only an aggregate restatement; its list does not name the Presidency.

Relevance to this case

Official-party context for the nationwide attack distribution; not target-specific evidence.

Primary Media report Source confidence: High

What this source supports

  • the reporter explicitly says ENTER.CO verified the official Presidency site was down at publication time
  • the article distinguishes the group claiming credit, Cyber Hunters OP, from the decentralized Anonymous label and warns that no social account can be treated as an official Anonymous account
  • the embedded YourAnonCentral post quotes the exact White_Hunters Presidency claim and its two screenshots
  • the observation establishes a point-in-time outage on 1 August, not DDoS, duration or actor causality

Evidence limits

The outlet records its own observation but publishes no raw probe, exact duration, historical baseline or cause. Its headline uses Anonymous while the body carefully rejects that as confirmed attribution.

Relevance to this case

Strongest independent, contemporaneous and target-specific observation of site unavailability.

Primary Threat actor claim Source confidence: Medium

What this source supports

  • @White_Hunters explicitly claimed that presidencia.gob.ve had been taken down by CyberHuntersOp
  • the first Check-Host screenshot shows HTTP connection timeouts for http://www.presidencia.gob.ve from numerous international locations
  • the second screenshot shows a browser developer-tools GET request for classContacto.php without a visible status or response and supplies no additional proof
  • the post and screenshots establish the public claim and contemporaneous multi-location reachability failure, not DDoS, continuous duration or actor causality

Evidence limits

The screenshots omit a verifiable permanent report URL, complete request details and baseline. A timeout can show unavailability without identifying DDoS or its cause.

Relevance to this case

Direct source for the actor claim, exact local date and contemporaneous reachability evidence.

Corroborating Official statement Source confidence: High

What this source supports

  • at 01:43:17 minister Gabriela Jiménez says the slide shows institutions mainly attacked since 28 July and at 01:43:23 explicitly names services of the Presidency, CNE, SENIAT, CANTV and PDVSA
  • at 01:43:49 she reports 25 affected institutions and 40 under investigation
  • at 01:44:12 she says 65 percent of attacks were denial of service, an aggregate distribution that is not mapped to the Presidency
  • the statement confirms the Presidency as an officially reported target but does not identify Cyber Hunters, publish target-specific telemetry or confirm the exact outage window

Evidence limits

The official presentation reports a target list and aggregate attack categories. It does not say that every named target suffered DDoS or attribute this exact event to Cyber Hunters.

Relevance to this case

Strongest primary official source that names Presidency services within the post-election cyberattack campaign.