Presunta propagación de un gusano USB a 100 empresas en Ciudad Guayana atribuida a GlorySec

What this source supports

• Daily Dark Web published GlorySec’s claim that USB worm malware spread in Guyana City, Venezuela
• the article paraphrases the scope as over 100 companies, while its actor-statement image says 100 different companies
• the actor statement claims complete system takeover, access to personal PCs and KingBike screenshots in GlorySecStorage
• the article and image provide no victim list, malware, telemetry, original KingBike artifact or independent validation

Evidence limits

Secondary reporting built on one actor-controlled statement. “Over 100” in the article conflicts with exactly “100 different companies” in the embedded statement; neither figure is validated. No named victim list, malware sample, IOC, telemetry or official response is supplied.

Relevance to this case

Strongest contemporaneous stored publication of the aggregate claim and its exact actor-statement image; evidence of the claim, not the alleged infections.

What this source supports

• Trend Micro says GlorySec placed malware on USB sticks in a Venezuelan city and allegedly gained access to systems in 100 different companies
• Figure 34 preserves an actor Telegram screenshot dated 06 June at 22:52 with the same worm, 100-company, system-takeover and KingBike assertions
• the article uses allegedly and does not independently validate the malware, victims, access or scope
• the broader article profiles hacktivist motivations and capabilities and was published eight months later

Evidence limits

High-quality researcher identity and a clear screenshot improve claim provenance, but the page reproduces the same actor-controlled material and supplies no independent victim, malware or telemetry validation.

Relevance to this case

Independent professional publication that preserves the apparent 6 June claim date and exact 100-company wording while explicitly treating access as alleged.

What this source supports

• SOCRadar profiles GlorySec and its shift toward Venezuelan targets
• the profile describes claimed defacement, DDoS, leaks and access and cautions that assertive claims may be inaccurate
• the page does not mention or corroborate the June USB-worm/100-company claim

Evidence limits

A later general profile based heavily on the group’s public channels. It provides no independent evidence for this incident, victim count, malware or access.

Relevance to this case

Retained only as explicitly separated actor context; it cannot support the incident classification, vector, date or impact.

What this source supports

• Check Point documents a distinct renewed post-election #OpVenezuela campaign beginning after 28 July 2024
• the article describes later DDoS and Venezuelan Communist Party account claims involving GlorySec
• the article does not mention or corroborate the June USB-worm or 100-company claim

Evidence limits

Authoritative secondary research for a later campaign phase, but temporally and substantively separate from the June worm claim.

Relevance to this case

Retained only as broader campaign context; it provides zero direct support for the asserted worm, target count, vector or impact.