Threat Actor Characterization
You’re viewing the read-only version.
Sign in for analyst tools (editors, promote draft, file/relations management, etc.)
Sonora Hackers Team
ID: 318b4882834c4da4d479b23c1693929e75714
Hacktivist Group
Data Leak Channel
Hacktivism
Threat types: Hacktivism, Data Exfiltration
Progress: 89%
Completeness: 88%
Freshness: 90%
Operation zone: Mexico
Aliases
Limited alias preview
| SHT | Sonora Hackers | So*********** | — |
Showing 2 of 3 aliases in free preview.
Actor Network Graph
Open Network GraphMITRE ATT&CK®
confidence: medium
Sonora Hackers Team is an emerging Mexico-linked data-leak and access-sales project likely centered on the operator identity alz / Alz_157s / alz157. Current evidence supports Telegram-based branding, public data-exfiltration claims, and probable continuity with the broader Sociedad Privada 157 ecosystem.
| Technique | Technique name | Tactics | Evidence |
|---|---|---|---|
| T1078 | Valid Accounts | TA0001 TA0003 TA0004 TA0005 |
|
| T1213 | Data from Information Repositories | TA0009 |
|
| T1083 | File and Directory Discovery | TA0007 |
|
| T1567 | Exfiltration Over Web Service | TA0010 |
|
Sonora Hackers Team — Emerging Mexico-Linked Data-Leak / Access-Sales Project Possibly Centered on a Single Operator
Classification: Unclassified / Open Source Intelligence (OSINT) + Human Intelligence (HUMINT) — TLP:WHITE
Executive brief
now
Saved successfully.
Hunting Playbook
now
Saved successfully.
IOC Appendix
now
Saved successfully.
OSINT Library — Sonora Hackers Team
2025-11-01 — Infobae — "El sistema educativo mexicano, en el centro de una tormenta de ciberataques y filtraciones masivas"
OSINT Library
now
Saved successfully.
