Operation Escaneo Targets Latin American Critical Infrastructure

Operation Escaneo (2025–2026) is described as a coordinated APT campaign attributed to the MexicanMafia group targeting critical infrastructure in Latin America, primarily Mexico. The attackers used a proprietary reconnaissance engine (Kimera), exploited vulnerabilities in Fortinet and Ivanti appliances to gain access and move laterally, and reportedly exfiltrated over 150GB of sensitive data—including personal records and SSL private keys—though some authorities have denied any breaches.