El ransomware BlackCat -también conocido como ALPHV- es uno de los más maliciosos de la actualidad y ya opera en América Latina. El grupo de hackers rusos que lo conduce -con vínculos con el Kremlin- pide millones de dólares cada vez que logra penetrar la infraestructura de una empresa o una persona. El nombre de este grupo -que coincide con el del programa- ganó reputación entre las empresas de ciberseguridad del planeta.

“Desde su primera aparición en 2021, BlackCat se ha convertido en una de las formas más activas de ransomware. Se cree que una nueva variante llamada Sphynx funciona con una velocidad y una eficacia aún mayores. BlackCat está escrito en el lenguaje de programación Rust y es más difícil de eliminar que otros tipos de amenazas de ransomware”, explica la empresa Akamai, dedicada a servicios en la nube, la distribución de contenido y la seguridad informática.

El grupo, comandado por Nikolay Antonovich Toporkov, ya se mueve en América Latina. Las operaciones que realiza no suelen cobrar estado público: pero bancos, energéticas, mineras, redes financieras y demás corporaciones estratégicas -como así también gobiernos- están advertidas de su actividad.

Uno de los ataques más sonantes en los últimos años ocurrió en febrero de 2024. En esos días, BlackCat atacó Change Healthcare, una empresa tecnológica de United Healthcare, en los Estados Unidos. La compañía es una de las más importantes del ecosistema de salud norteamericano: ofrece una extensísima gama de servicios al sector, incluidos pagos y facturación, procesamiento de recetas y análisis de datos. El hackeo afectó a unos 190 millones de personas y duró una semana. Y se pagaron 22 millones de dólares de rescate en criptomonedas para los ciberdelincuentes. Pero el costo total fue muy superior: se calcula que alcanzó los 3 mil millones de dólares. El pago fue confirmado por Andrew Witty, su director ejecutivo, ante el Congreso de los Estados Unidos.

BlackCat orientó parte de sus ataques en América Latina hacia infraestructuras críticas, organismos públicos y compañías de alto valor. La organización utiliza un esquema de triple extorsión: cifraba los archivos de la víctima, robaba información confidencial y amenazaba con publicarla. En algunos casos, sumaba ataques de denegación de servicio distribuido -DDoS, por sus siglas en inglés- para aumentar la presión sobre las organizaciones afectadas.

En Ecuador, el grupo atacó en abril de 2022 al Municipio de Quito. La ofensiva afectó trámites ciudadanos y dejó expuesta documentación financiera y legal. El episodio fue uno de los primeros casos atribuidos a ALPHV contra una entidad gubernamental de América Latina.

Brasil apareció de forma recurrente entre los cinco países con más infecciones de BlackCat a nivel global, de acuerdo con informes de firmas de ciberseguridad. En México, los reportes documentaron ataques contra más de una docena de empresas industriales y manufactureras, lo que mostró el interés del grupo por organizaciones que dependen de sistemas operativos y cadenas de suministro.

Pero uno de los casos más sonados ocurrió en -paradójicamente- un “aliado protegido” por Rusia: Cuba. Ocurrió casi en simultáneo con el ataque a Change Healthcare. Pero en este caso, los rusos vinculados al Kremlin fueron por una de las más importantes instituciones financieras de La Habana. La Corporación CIMEX y su filial financiera Fincimex fueron los objetivos de Toporkov y sus hackers.

CIMEX es el conglomerado estatal de empresas más grande de la isla. Depende del Grupo de Administración Empresarial SA (más conocido por sus siglas, GAESA), los jerarcas militares que controlan de facto la economía de la isla. Opera en casi todos los sectores bajo el tutelaje uniformado: comercio minorista, combustibles, gastronomía, servicios, finanzas, turismo y transporte. Todo pasa por CIMEX (es decir, GAESA, los militares del régimen).

Fue por eso que muchos de los jerarcas cubanos mostraron su ira contra Rusia -aunque contenida- cuando desde Moscú les dijeron que no tenían nada que ver con ese ataque. La suma fijada como extorsión también se aproximó a las dos decenas de millones de dólares que fueron a las manos de los hombres de Toporkov. El régimen nunca informó lo ocurrido a la opinión pública. Pero hubo consecuencias drásticas: destituyeron a Alejandro Gil Fernández, ministro de Economía y Finanzas, a Manuel Sobrino Martínez, ministro de Industria Alimentaria y a Elba Rosa Pérez Montoya, ministra de Ciencia y Tecnología. Todos afuera del estado. Al primero, además, lo condenaron a prisión perpetua. Lo acusaron de espionaje.

Cuando sospecharon de los actores detrás de BlackCat el Kremlin intentó cubrir a Toporkov. Dijo que en su lugar el responsable había sido Oleg Nefedov, líder de BlackBasta, otra red -también rusa- que ya estaba desarticulada. Nadie creyó del todo la explicación que dieron funcionarios del embajador de Rusia en La Habana, el camarada Viktor Koronelli. El diplomático es muy conocido en América Latina: estuvo destinado en Chile, México y Argentina.

En La Habana se preguntan cada vez más seguido hasta cuándo pueden continuar confiando en Moscú. Los generales más veteranos saben que los días están contados y que solo les queda reposar en ellos. Pero las dudas surgen entre oficiales más jóvenes. Creen que los rusos los engañaron y que prefirieron encubrir a sus hackers antes que honrar sus compromisos con su socio histórico. Otros, más indulgentes, prefieren dudar: ¿son ineptos o encubridores?

Mientras tanto, BlackCat continúa operando en América Latina. Lo hace con la misma estructura pero en escalas menores. El Departamento de Justicia norteamericano abrió una investigación que avanza no solo en los Estados Unidos sino en toda la región. Una recompensa, además, está pendiente para quien pudiera aportar datos.

X: @TotiPI

BlackCat,CIMEX,Cuba,Rusia,ciberataque

FIRST ON FOX: The CEOs of four companies, including Flock Safety, are being called to testify before a Senate panel next week as lawmakers look to crack down on AI-powered surveillance camera tracking Americans’ movements, Digital has learned.

A number of lawmakers and several governors have called for investigations into alleged privacy violations regarding the handling of images and data generated by AI-backed surveillance cameras.

The Senate Judiciary Subcommittee on Crime and Counterterrorism will hold a hearing titled «Always Watching: Flock’s Nationwide AI Surveillance Network» on Sept. 23.

THREE NEW COMPANIES FACE JOSH HAWLEY’S INVESTIGATION INTO AI SURVEILLANCE AND VEHICLE TRACKING

«Americans do not surrender their privacy rights when they drive to work, drop their kids off at school, or go to church,» subcommittee Chairman Sen. Josh Hawley, R-Mo., told Digital in a statement. «I’m investigating these companies to determine WHO has access to hundreds of millions of Americans’ data – and what they’re doing with it.»

Garrett Langley, CEO of Flock Safety, Rick Smith, CEO of Axon Enterprise Inc., Greg Brown, CEO of Motorola Solutions, and Filip Kaliszan, CEO of Verkada, have all been invited to testify before the committee.

Digital reached out to the four companies invited to testify.

AI-powered surveillance cameras have been heavily scrutinized by lawmakers over concerns that the cameras track individuals’ movements without reason, regardless of whether a crime is being committed.

FORMER PENTAGON AI CHIEF WARNS FLOCK CAMERAS COULD CREATE ‘CHINA-LIKE SURVEILLANCE STATE’ IN THE US

A number of politicians have taken action against the devices, with Florida Gov. Ron DeSantis ordering the removal of all license plate reader cameras from Florida state roads and Texas Gov. Greg Abbott ordering all state agencies to stop spending state money on Flock Safety cameras.

Flock Safety cameras, along with other similar brands and technology, use artificial intelligence to automatically track and identify vehicles and license plates for local law enforcement use. Nationwide concern has grown about whether the AI-backed system should be allowed to track the movement of vehicles without a warrant or the consent of drivers.

FLOCK SURVEILLANCE SPREADS ACROSS THE SOUTH AS RED-STATE LAWMAKERS SEEK TO AX ‘1984’-STYLE TRACKING TOOLS

A total of about 120,000 Flock Safety cameras are operating in the U.S. in every state except Alaska.

Opposition to Flock Safety cameras has created an unlikely political overlap, with Republicans and far-left activists criticizing the technology for very different reasons. Republican lawmakers have largely centered their objections on privacy rights, government overreach and warrantless surveillance, while socialist and communist organizers have incorporated the cameras into broader campaigns opposing artificial intelligence, law enforcement, immigration enforcement, data center development and what they describe as an emerging «police state» or «AI surveillance state.»

LICENSE PLATE CAMERAS ARE TRACKING DRIVERS EVERYWHERE

President Donald Trump told reporters on Monday that he supports the idea of Flock Safety cameras «because of law enforcement» and the aid AI-powered cameras provide to police and local law enforcement.

Over the last year, several far-left organizations tied to a network funded by Shanghai-based tech businessman Neville Roy Singham have organized local opposition to Flock Safety cameras while simultaneously campaigning against new data center projects. Meanwhile, President Donald Trump and other Republican leaders have continued to champion data center construction as part of the administration’s broader technology and infrastructure agenda.

FIRST ON FOX: ‘NO KINGS’ PROTEST NETWORK BEHIND FIGHT AGAINST AI DATA CENTERS AND FLOCK CAMERAS

The Party for Socialism and Liberation’s Denver chapter teamed up with Indivisible and the far-left Sunrise Movement in May to promote a public forum focused on the alleged link between data centers and mass surveillance, contending that both exist to serve billionaires instead of everyday communities.

TEA PARTY FOUNDER LAUNCHES NATIONWIDE ‘DATA CENTER REVOLT’ AGAINST AI DATA CENTER EXPANSION

The Party for Socialism and Liberation’s Tucson chapter joined «deFLOCK Tucson» and the «No Desert Data Center Coalition» on July 25 for a gathering dubbed «It’s ALL Connected,» held at the Global Justice Center on E. 26th Street.

Event advertisements posed a question about what mass surveillance, data centers and electricity have in common, responding with a single message: «IT’S ALL CONNECTED.»

hearings, smart and safe tech, big tech backlash, congress, technology, politics, fbi

Rep. Jasmine Crockett, D-Texas, who recently lost her Senate bid, is facing online backlash after she honored music artist Chris Brown by entering him into the congressional record this past weekend.

«Now, y’all know, I tend to get in trouble every once in a while. I’m a make this real quick. I need to know who run it! So is Dallas in the building?» Crockett said as she took the stage alongside Brown on Saturday evening.

«Let’s give it up for Chris Brown,» she added to applause from the audience.

The moment drew scrutiny from viewers online, raising questions about Crockett’s status as a lawmaker and whether it should be used to celebrate Brown, someone with a history of domestic violence.

AMERICA OWES BLACK WOMEN ‘EVERYTHING,’ REP JASMINE CROCKETT RANTS OVER JULY 4 WEEKEND

Among other instances of misconduct, Brown pleaded guilty in 2009 to felony assault after he attacked his then-girlfriend and famous singer, Rihanna. Many images of her injuries were made public, sparking intense condemnation from the music industry. His violence, however, wouldn’t stop there. He was involved in a 2013 altercation with Frank Ocean, another singer, and pleaded guilty to a misdemeanor assault charge that same year. In 2017, another ex-girlfriend was granted a domestic violence restraining order against him after she alleged physical abuse.

Most recently, Brown pleaded guilty to charges of striking producer Abe Diaw twice in the head with a glass tequila bottle in July 2023. He is expected to receive a sentence in October for a separate charge for affray, a criminal charge in English law for unlawfully threatening violence against another person.

Andrew Kerr, an investigative reporter with the Washington Free Beacon, quickly noted Brown’s past in a post to X after news of Crockett’s tribute began to spread online.  

«Kamala Harris-endorsed Rep. Jasmine Crockett uses her congressional authority to honor Chris Brown, the rapper best known for beating ever-living s— out of Rihanna in 2009,» Kerr wrote.

Shannon Watts, a Democratic activist and political commentator, also pointed out Brown’s storied past.

WATCH: HEARING TURMOIL AS JASMINE CROCKETT UNLOADS ON MLK’S NIECE IN WILD RACIALLY-CHARGED RANT

«Chris Brown pled guilty to felony assault after brutally attacking Rihanna. Another ex, Karrueche Tran, later obtained a five-year restraining order after testifying that he abused and threatened her. He has also faced multiple allegations of violence and sexual assault against other women,» Watts wrote.

Crockett’s member statement, a form of recognition that lawmakers can have entered into the congressional record without any vote, recognizes «the artistry of Chris Brown and Usher Raymond.»

On stage on Saturday, Crockett framed her member statement as a way to recognize two key artists who had helped shape contemporary R&B and pop music, especially for the Black community.

«I know it’s almost Sunday, so I wanna be clear. Weeping may endure for a night, but joy comes in the morning. And right now, we are experiencing Black joy to the highest level, and I wanted to make sure we document that in the Congressional Record,» Crockett said.

But Democratic strategist Ameshia Cross believes that the moment was a political miscalculation, coming across as ignorant of the challenges in the Black community.

«Chris Brown has a problem, and several folks beyond Rihanna have met his violent rage. It’s well-documented. This was a ridiculous move by Crockett,» she wrote on X.

«Also, when Black women suffer [domestic violence] at the highest rates and often fatally, this was tone deaf as hell,» she added.

Eric Michael Garcia, the D.C. bureau chief of the Independent, echoed Cross’ thinking.

«Absolutely disgusting to see Jasmine Crockett platform and honor an abuser of women. Just completely vile,» Garcia wrote in a post of his own.

Dan Winslow, a New York Times bestselling author, hinted that the moment had changed his view of her.

WATCH: TALARICO EMBRACES ‘FREAKY’ IDENTITY AS CROWDS CHANT NAME MEANT AS INSULT: ‘SO WEIRD’

«CHRIS BROWN plead guilty to beating Rihanna. It was a horrific and savage beating. Crockett thought he deserved to be honored. Absolutely disgusting behavior. I am glad she lost. I will never support her again,» Winslow wrote.

In response to the public backlash, Brown posted a response to his Instagram account, pleading to be left alone and expressing displeasure at Crockett having put him in the spotlight.

«Funny thing is… YALL CAME TO ME WITH THIS! NOT THE OTHER WAY AROUND. I was minding my own d-mn business. My shows in Dallas were already sold out. I ain’t asked to be honored because I knew some sh-t like this would happen… I have an idea how about y’all leave me the f— alone and let me focus on the fans that spent their money to actually see and support me,» Brown wrote.

Having decided to give up her seat to pursue a Senate bid, Crockett will not be returning to the U.S. House of Representatives at the start of the next congress after she lost to James Talarico, the Democratic nominee in the Lone Star State.

politics, arrest, rihanna, kamala harris