Operation Escaneo

Campaign
6 incidents First seen 2026-06-18 Last seen 2026-09-03
Overview

Operation Escaneo appears in 2 incidents tracked by Vulpsec CTI; the most recent is: Operation Escaneo Signals Shift in LATAM Threat Landscape. Targeted sectors: energy, finance, government.

Investigate in CTI Graph Login required Open in Dashboard
Threat ecosystem
Actors Malware Campaigns CVEs
Tap a node for a quick look · double-tap to open its profile
At a glance
peak priority 140
Activity by month (incidents)
2026-062026-09
Sectors targeted
finance · 3energy · 2government · 2defense · 1technology · 1telecommunications · 1transportation · 1
Countries targeted
AR · 6BO · 6BR · 6CL · 6CO · 6CR · 6CU · 6DO · 6EC · 6GT · 6HN · 5MX · 5
Origin
ES · 1
Kinds of incident
Industry & Policy · 4AI-Enabled Attack · 1Cyberattack (general) · 1
Techniques seen in incidents
Espionage · 2Exfiltration · 2Phishing · 2Ddos · 1Lateral Movement · 1Privilege Escalation · 1Ransomware · 1Reconnaissance · 1Social Engineering · 1T1003.002 - Security Account Manager · 1T1003.003 - NTDS · 1T1021 - Remote Services · 1T1027 - Obfuscated Files or Information · 1T1055 - Process Injection · 1
Related malware
Neo-reGeorg · 1
Related CVEs
CVE-2020-1938 · 1CVE-2021-4034 · 1CVE-2022-42475 · 1CVE-2023-27997 · 1CVE-2023-46805 · 1CVE-2024-21762 · 1CVE-2024-21887 · 1CVE-2025-0282 · 1
Incident timeline
2026-09-03
Palo Alto AlienVault OTX AlienVault OTX AlienVault OTX
2026-07-15
Is 'Tech-xit' Imminent? UK Steps Up Sovereignty Push Amid AI Strife
Dark Reading
2026-07-09
European Organizations Have a Collaboration Security Confidence Gap
Dark Reading
2026-06-24
2026 FIFA World Cup Faces Surge in Cyber Threats
Dark Reading
2026-06-19
Stressors, AI Forcing Changes to Cybersecurity Teams
Dark Reading
2026-06-18
Dark Reading Infosecurity-Magazine