Hacktivist group

SpeakTeam

SpeakTeam is a Spanish-language data-breach and leak collective observed in early 2026 targeting Mexican education, government, finance, telecommunications and other institutions. Public artifacts associate the group with MagoSpeak and Z3r00, while independent victim-side confirmation remains uneven across the claimed campaign.

INFERENCE (confidence: medium): The current profile should be updated through event-level validation rather than by inheriting capabilities from associated personas, channels or adjacent ecosystems.

Created by iQBlack CTI Team
Contributors 1
Last updated 2026-08-20

ATT&CK

MITRE ATT&CK

T1213Data from Information Repositories
T1530Data from Cloud Storage
T1657Financial Theft

Research

Selected OSINT