Grupo hacktivista

STW Team

Origen: México Estado: Activo Confianza: Confirmado

STW Team is an emerging Spanish-language actor focused on Latin American organizations. Its observable activity combines website defacement, data or personal-information exposure and publication of screenshots purporting to show institutional access, including an alleged webmail session associated with the Central Bank of Venezuela.

STW Team presents a stronger operational record than a communication-only emerging group. Public artifacts and actor posts support a regional pattern involving defacement, data exposure and display of alleged institutional access.

The alleged BCV webmail access is strategically significant but technically ambiguous. The available screenshot does not establish the access method, privilege level, persistence or data exfiltration.

INFERENCE (confidence: high): STW Team is attempting to consolidate a Latin American reputation by combining numerous lower-impact incidents with a small number of institutionally sensitive access claims.

INFERENCE (confidence: medium-high): The actor’s public pause, cleanup and contemplated return suggest a persona-led group whose operational tempo depends on a small number of central participants.

Creado por iQBlack CTI Team

Colaboradores 1

Última actualización 2026-08-21

ATT&CK

MITRE ATT&CK

T1491.002External Defacement

T1585.001Social Media Accounts

Research

OSINT seleccionado

STW Team displays alleged access to the Central Bank of Venezuela’s webmail in a sequence of activity against Latin American entitiesiQBlack Threat Intel Insight Official Institutional WebsiteBanco Central de Venezuela GroupWise Product DocumentationNovell / OpenText Establish Accounts: Social Media Accounts (T1585.001)MITRE ATT&CK Defacement: External Defacement (T1491.002)MITRE ATT&CK