Guacamaya is a hacktivist group targeting military, police, and mining sectors in Latin America.
Guacamaya is a threat group active in Latin America, motivated by environmental degradation and repression of native populations, targeting military, police, and mining sectors. They primarily target military agencies, police forces, and mining companies. Their key TTP involves hack and leak operations, gaining access to systems to steal and publicly disseminate sensitive data. Defenders should focus on monitoring data exfiltration indicators and strengthening access controls to critical infrastructure to prevent information leaks.
Guacamaya has conducted multiple hack and leak campaigns against military and police agencies and mining companies across Latin America, which they believe have played a role in the region’s environmental degradation and repression of native populations.
Their main TTP involves hack and leak operations, where they gain access to systems to steal and publicly disseminate sensitive data.
Guacamaya primarily targets military agencies, police forces, and mining companies.
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.