Skip to content
  • Oil
Guacamaya, the “hacktivists” who go after mining companies, oil and the Armed Forces. from South America

Guacamaya, the “hacktivists” who go after mining companies, oil and the Armed Forces. from South America

Macaw is a type of native bird that travels through Central and South America. This September 19, it was also identified as the name of the group of “hacktivists” who leaked about 10 terabytes of emails from various military organizations in Central and South America.

With the message “(…) the military and police forces of the State of Abya Yala are the guarantee of the dominance of North American imperialism, they are the guarantee of the extractive presence of the Global North”, the military establishments. Chile, Peru, Colombia, Mexico and El Salvador were victims of this cyber attack.

You may also like:

Defenders of the Abya Yala

The beginning of this organization took place on March 6 of this year, when they carried out their first cyber attack against the Guatemalan Nickel Company (CGN) and the Izabal Nickel Processing Company (Pronico), also from Guatemala.

After that attack, they made their definition: “We are all children, all those people who were affected ancestrally by the invasion and dispossession of Abya Yala; we are the daughters and sons of those who defended their lives, with the own life, we are from the south, from the center, from the north, from the Caribbean, we are daughters and sons of mother earth, we were, and we will be in any corner where the invader, the settler, the new -settler, the extractive looter, rights by passing over. expelling communities, ancient cultures, forests, rivers and seas to accumulate what they consider to be wealth”.

Abya Yala concept, according to research African Brotherhood, of Beatriz Carrera Maldonado y Zara Ruiz-Romero For Pablo de Olavide University in Seville, Spain, it means Lush Land, Living Land or Flowering Land, and is used by the original Kuna people, who live in Colombia and Panama.

In his first attack, Guacamaya defines the entire American territory as Abya Yala and adds that his main interest is to protect Mother Earth from any extractive project that threatens the ancient communities and cultures that are part of the damaged territories. “We have resisted with sticks, arrows, stones, thoughts and spirit. We are not afraid because we have come from the earth and we return to it,” they clarify in the statement reported by the media. Community Press from Guatemala.

This information was obtained after the interview they gave, after that attack, to the media Forbidden Stories.

To date, the organization has carried out four attacks, three related to environmental pollution and the last one to American military organizations.


The first of them consisted of the leak of 4.2 terabytes of documents on the Fénix mining project, by the Guatemalan Nickel Company (CGN) and the Izabal Nickel Processing Company (Pronico), which is in charge of the Russian-Swiss multinational Solway.

The main charge against the Solway group was that they were killing the communities in the sector to start the mining project. In the document they list all the activists who lost their lives defending their territories.

Likewise, they screen the “Magic Carpet Case”, in which they reveal that representatives of the Guatemalan Government received bribes from Solway to achieve their objectives.

“The Solway mining company is part of the Russian, Kazakh, Israeli and Ukrainian network involved in the Magic Carpet scandal. People have received millionaire bribes from the Guatemalan government in favor of the mining and port interests of the Mayaniquel mining company, a territorial neighbor. of the FENIX mining project. of Solway. Russian directors of Mayaniquel are also directors of Solway and its subsidiary CGN in Guatemala”, they state (version the statement on the cyber attack).

Guacamaya’s statement applied to a huge project in which 65 journalists from around the world participated, which managed to expose not only the corruption but also attempts to manipulate local governments, and the surveillance of journalists. This project contains four major reports – including the aforementioned interview with Guacamaya – within a series called Mining Secrets (Mining Secrets in Spanish).

South American mining companies

The second attack took place on August 1 and was directed against mining companies from various countries in Central and South America, to reveal the corruption and damage they were causing in the communities and territory where they were located.

According to CyberScoop, the companies affected were: ENAMI, Ecuador’s state mining company; the National Hydrocarbon Agency (ANH) in Colombia; Granada New Energy Corporation in Colombia; Quiborax, a Chilean mining company; Oryx, an oil company in Venezuela; Tejucana, a Brazilian mining firm; and Guatemala’s Ministry of Environment and Natural Resources (version statement about the attack).

Colombian Prosecutor’s Office

The Guacamaya group appeared for the third time on August 7, when they released 5 terabytes of emails from the Colombian Prosecutor’s Office.

The reason for this attack was to deny that the starting point – according to what they declared – of the Colombian State’s criminal policy begins in the Prosecutor’s Office, accusing it of being one of the most corrupt organizations in that country, managing –i. their opinion – I want the evidence, the processes, the convictions, etc. They indicate that she is involved with businessmen, public entities, the military, members of the State and drug traffickers (version statement about the attack).


The latest attack from this group is the one we know these days, precisely from September 19 – Army Glory Day in our country -, when 10 terabytes of emails were leaked, as well as other military and police subjects. agencies from Chile, Colombia, Mexico, El Salvador and Peru.

In his statement – ​​as recorded CyberScoop – They point out that, in addition to being a guarantee of US imperialism’s dominance over local communities, they are also “violent forces of oppression, criminals against the communities themselves and their internal pyramid organization power charts.”

The bodies affected were the following: Joint Chiefs of Staff of the Chilean Armed Forces; the Secretariat of National Defense of Mexico; The National Civil Police of El Salvador and the Armed Forces of the same country; General Command of the Colombian Military Forces; The Joint Command of the Armed Forces of Peru and that country’s Army (version statement about the attack).

“There is no confirmation of its origin”

Despite what has been expressed in their communications and what has been “defined” by the press about Guacamaya, for experts on the subject it is necessary to clarify that there is no exact confirmation of its origin.

To the co-founder and CEO at the 8.8 Computer Security Conference, Gabriel Bergel, it is crucial to consider that there are different types of groups in cyber security that want to appropriate certain information, from cyber criminals to activists. Starting from this base, the expert believes that it is not necessary to confirm the origin of this group, since they are now visible on the national scene.

Bergel deepens his idea, comparing this situation to what happened in 2018 with the attack of the Lazarus group, where they attacked national banks and it was established that it was a North Korean military group, or the that happened with the group of Shadow brokers, which was assumed. to be Russian, but in the end turned out to be South American.

“We have not been able to verify it yet, nor what was really the attack vector carried out in this case. Because what a person does in this type of case is forensic analysis. It is the same thing that the police when there is a murder”, explains the CEO of the 8.8 Computer Security Conference.

Start investing your money in cryptocurrencies and get Free Bitcoin when you buy or sell 100$ or more if you register in Coinbase