“Let’s see if they believe us now”

During the early hours of this Wednesday, April 3, 2024, Pancho Villa, leader of the Mexican Mafia hacker group, broke into the official website of the Oaxaca state government and inserted an image of his group. This act occurred after the denial of the Secretariat of Security and Citizen Protection (SSPC) on March 31, denying the alleged theft of information by said group.

Until 8:00 am of this April 3, the image remained active on the site, challenging computer security systems, as this medium was able to confirm when accessing the link from several devices.

. .

The Oaxacan government’s denial took place one day after it was reported in Publimetro México that Pancho Villa had put 17 years of police data on the site for sale. Breach Forums, including more than 2.9 million of data lines of the secretariat.

The SSPC issued a statement following this publication:

“The Secretariat of Security and Citizen Protection (SSPC) categorically denies the alleged massive theft of information from the database of the Oaxaca State Police. Given the news spread on social networks, the SSPC reiterates its commitment to the protection of the information and privacy of the data stored on the digital platforms of this agency and the corporations that comprise it.”

Pancho Villa responds to Oaxaca’s denial

In response to the denial, Pancho Villa carried out an attack defacing o defacement, a form of digital vandalism in which he altered the content of the website without authorization, leaving his mark and image that characterizes his group. Later he noted:

“Let’s see if they believe us now.”

It is relevant to mention that, to date, the publication of the hacker in Breach Forums is still active. This site has also been the site of leaks of confidential information, such as the data of journalists attending President Andrés Manuel López Obrador’s morning conferences and the alleged sale of information on 12 million people registered on the government’s Employment Portal. federal, as reported Advertising meter Mexico in February of this year.

Mexican Mafia hacking wave

The group Mexican Mafia, responsible for the attack on the Oaxaca government, has carried out several massive hacks in recent weeks that have had a great public impact. These include the “Chilango Leaks”, with confidential information from more than 2,300 Mexico City government accounts, as well as the vulnerabilities found on the Tax Administration Service (SAT) site, which also sought to be denied by the tax authority. , and the Research Institute in Applied Mathematics and Systems (IIMAS) of the UNAM.

In the specific case of the hacking of the SSPC of OaxacaNotably Pancho Villa He chose not to sell the information, but instead made it available to anyone who had credits on the hacking forum. Among the data provided are logs obtained from police “Kardex” tools, logs from their platform and IP, MAC addresses.

“Previously I published it for sale; However, the ‘interested parties’ were pure researchers, so I decided to publish it on Breach Forums, where it has a ‘cost’ in the form of credits in the forum,” explained the hacker when he was consulted by this media outlet.