Threat Intelligence Report

Operation Escaneo: Infrastructure Exposure, TTP Analysis, and Attribution Assessment of an Advanced Intrusion Campaign Against Mexican Federal Agencies and Financial Institutions

📅 June 20, 2026 📰 www.cloudsek.com 🔍 13 CVE(s) referenced

Operation Escaneo exposes a highly advanced, multi-stage intrusion campaign attributed to MexicanMafia, revealing custom tools, persistent network-level access, and mass data theft targeting Latin American government and financial institutions via sophisticated exploitation of perimeter devices and enterprise systems.

unclassified

CVE-2022-22972, CVE-2022-42475, CVE-2024-21762, CVE-2020-1938, CVE-2021-4034, CVE-2020-0796, CVE-2021-44228, CVE-2020-1206, CVE-2025-0282, CVE-2024-21887, CVE-2023-27997, CVE-2020-1472, CVE-2023-46805

🔐 Sign In to Read Full Report

You'll need to accept our Terms of Service to access the platform.

📊 Visual Mindmap

🎯 IOC Extraction

⚔️ MITRE ATT&CK TTPs

📦 STIX 2.1 Bundle