Cyber Incident Victim: Guatemalan Government
Date:
Oct 2023
Location:
Guatemala
Summary
Hackers associated with Anonymous launched distributed denial-of-service attacks against multiple Guatemalan government webpages, including those of the judicial branch and Department of Agriculture, causing temporary disruptions in support of ongoing pro-democracy protests. The attacks aligned with Indigenous-led demonstrations demanding the resignation of officials accused of undermining President-elect Bernardo Arévalo's electoral victory and threatening democratic institutions. Authorities characterized the incident as a national security matter, while the hackers claimed their actions were intended to support public demands against corruption and impunity amid sustained civil unrest.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
On October 14, 2023, hackers associated with the activist collective Anonymous launched distributed denial-of-service (DDoS) attacks against multiple Guatemalan government websites, disabling several critical online services in what authorities declared a national security incident. The attacks began early Saturday, flooding targeted webpages with automated traffic until they crashed. Affected systems included the judicial branch, the Department of Agriculture, and the General Secretary of the president’s office. While some services were restored quickly, others remained inaccessible for an extended period. The hacker group @AnonGTReloaded publicly claimed responsibility on social media platform X, announcing the coordinated attack as a show of solidarity with ongoing pro-democracy protests led by Indigenous organizations. Guatemalan authorities confirmed the cyber intrusions and initiated an unspecified response to address the disruptions, though no technical details of their mitigation efforts were disclosed. The incident coincided with escalating tensions following 13 consecutive days of nationwide demonstrations demanding the resignation of key judicial figures.
The cyberattacks directly supported widespread protests calling for the removal of Attorney General Consuelo Porras, prosecutors Rafael Curruchiche and Cinthia Monterroso, and Judge Fredy Orellana, whom demonstrators accused of undermining President-elect Bernardo Arévalo’s August 2023 electoral victory and threatening Guatemala’s democratic institutions. An Anonymous representative involved in the operation stated the attacks aimed to back protesters combating corruption and impunity, aligning with the group’s declared mission to “support humanity.” Concurrently, public unrest manifested physically when protesters surrounded Miguel Martínez, a former official and associate of outgoing President Alejandro Giammattei, during a public event in Antigua, though no legal actions against Martínez were reported. The digital disruptions amplified pressure on Guatemala’s government amid sustained road blockades and mass mobilizations organized primarily by Indigenous groups, who framed their demands as a defense of electoral integrity against what they characterized as judicial overreach targeting Arévalo’s progressive Seed Movement party. Authorities maintained the cyber incident’s national security classification without elaborating on investigation timelines or attribution specifics beyond acknowledging Anonymous’ involvement.