Campaña de phishing contra usuarios de BDV y Patria atribuida a Los Ciberandinos

What this source supports

• reports six total detainees, more than 200 victims, phishing/mirror pages and a fugitive alleged leader
• attributes an approximately USD 10 million estimate and BDV/Patria wording to officials
• explicitly treats a separate Banco de Venezuela outage and states that no link to this operation was established

Evidence limits

The USD 10 million figure is an authority estimate relayed by media, not an audited loss. The article provides no evidence of compromise to BDV or Patria infrastructure.

Relevance to this case

Substantive account of reported scale, method and arrests, with a useful explicit warning against linking a separate outage.

What this source supports

• reports Los Ciberandinos, six total detainees and phishing in Táchira
• repeats the official-chain estimate of USD 10 million and BDV/Patria claims
• the embedded Douglas Rico post independently confirms phishing, mirror pages, more than 200 affected people and six detainees but does not name BDV, Patria or USD 10 million

Evidence limits

The article overstates infiltration/malware relative to the official Rico caption, which describes phishing and mirror pages. Neither page provides forensic proof of infrastructure compromise.

Relevance to this case

Corroborates arrests and reported operation while preserving two directly inspectable primary references.

What this source supports

• reports six total detainees, more than 200 victims, phishing/mirror screens and a fugitive alleged leader
• repeats an approximately USD 10 million official estimate and BDV/Patria wording

Evidence limits

Derivative authority-based reporting; it does not establish the loss through records or prove compromise of platform infrastructure.

Relevance to this case

Corroborates the public narrative and reported method, arrests and scale.

What this source supports

• repeats six detainees, phishing, the more-than-200 figure and approximately USD 10 million estimate
• uses malware/infiltration language without providing technical evidence

Evidence limits

Its malware and system-infiltration wording is not demonstrated and conflicts with the more specific phishing/mirror-page method in the official Rico post.

Relevance to this case

Contextual repetition retained with reduced confidence and explicit limits.

What this source supports

• describes phishing through mirror pages/profiles, credential capture, transfers through third-party accounts and currency conversion
• repeats more than 200 affected people/institutions and more than USD 10 million
• includes additional individual anecdotes that are not established as part of Los Ciberandinos

Evidence limits

Published ten days later and mixes the specific operation with other reported fraud cases; those anecdotes are not counted as incident evidence.

Relevance to this case

Useful detailed secondary description of the reported phishing workflow.

What this source supports

• CICPC reportedly dismantled Los Ciberandinos in San Cristóbal
• reports phishing/mirror profiles, more than 200 affected people and six total detainees
• does not name BDV, Patria or USD 10 million in the article body

Evidence limits

Media reproduction of a CICPC announcement, not an independent forensic report; its six detainees comprise five adults and one adolescent.

Relevance to this case

Earliest clear attached report and closest textual reproduction of the official CICPC account.

What this source supports

• quotes Freddy Bernal on six total detainees, months of operation, at least 29 formal complaints and affected San Cristóbal/Jáuregui mayoral accounts
• reports a possible USD 10 million aggregate estimate
• describes false identities and account abuse but does not technically prove intrusion into BDV or Patria infrastructure

Evidence limits

The phrases “ingresar a sistemas”, malicious programs and altered data are not backed by technical artifacts; the same article describes a social-engineering/account-fraud operation.

Relevance to this case

Supports the separately attributed loss estimate, institutional-victim reporting and chronology without proving a bank-platform breach.

What this source supports

• BDV says it neutralized 19,322 attempted scams in Q1 2025 and explains phishing through false links
• warns that BDV never sends banking-login links or requests sensitive credentials
• does not name Los Ciberandinos, this investigation, the six detainees, more than 200 victims or USD 10 million

Evidence limits

First-party and authoritative for BDV anti-phishing context, but it cannot be used as confirmation that Los Ciberandinos caused all or any of the stated 19,322 attempts.

Relevance to this case

Demonstrates the phishing threat and BDV guidance while contradicting any inference that the bank acknowledged an infrastructure breach in this incident.