Operation Escaneo Targets Latin American Critical Infrastructure

Operation Escaneo was a coordinated cyber campaign (2025–2026) attributed to the MexicanMafia group that targeted critical infrastructure across Latin America—primarily Mexico—using sophisticated reconnaissance (Kimera), exploits against Fortinet and Ivanti internet-facing appliances, and lateral movement to exfiltrate over 150GB of sensitive data including personal records and SSL private keys; the operation affected government and financial entities and poses a significant national-security risk despite some local authorities denying breaches.