CYBER THREAT INTELLIGENCE LATIN AMERICA · Strategic intelligence on digital financial fraud Read the blog
Independent editorial research · Latin America
Who writes · CTI LATAM

Ezequiel Jorge La Terra

Independent researcher · Strategic intelligence on digital financial fraud in Latin America

I investigate digital financial fraud in Latin America: banking malware, phishing kits and PhaaS, BEC, ransomware, MitM/AiTM attacks, voice and video deepfakes, and identity fraud (KYC). I work with my own hand-curated dataset and with field investigations. Every note states its source, the date of the data and what the evidence does not allow me to claim.

What I investigate

Financial threats in Latin America: banking malware, phishing and fraud kits. I contrast technical reports from labs and vendors to maintain my own hand-curated dataset and to track how threats evolve country by country.

How I work

I separate evidence, inference and limit. Every note states the date of its data, links its sources and says when a claim cannot be supported by the available evidence.

Editorial scope

This is editorial work: not continuous monitoring, operational attribution, representation of third parties or a guarantee of results for any institution.

Methodology

My process has four stages and, when the case warrants it, an optional deep-dive stage.

  1. 01 · Collection
    Primary and technical sources

    Reports from labs, vendors and response teams, and alerts from public bodies.

  2. 02 · Validation
    Cross-validation and normalization

    I contrast every data point and normalize the names and aliases of each family.

  3. 03 · Analysis
    Techniques and correlation

    Techniques mapped to MITRE ATT&CK and correlation in OpenCTI and MISP.

  4. 04 · Publication
    Cutoff, scope and limitations

    Every publication goes out with the date of the data, scope and limitations stated.

  5. Optional · Deep dive
    Threat hunting and malware analysis

    When the case warrants it, in controlled and isolated environments.

Principles

Rigor before speed: I do not publish claims that the evidence does not support. Transparency: every data point is traceable to its source. Caution in attribution: I do not assign authorship to actors without sufficient support. Public correction: when I am wrong, I record it and correct it.

What I do not provide

My work is research and strategic analysis. I do not offer 24/7 continuous monitoring, operational attribution or incident response. Nor do I act on behalf of third parties.

Work on this site

Pieces of the dataset with source and date. Links to published work.

Financial malware

Map and index of Android and Windows families, and of PhaaS platforms documented in the region.

Coverage and gaps

Which countries have documented families, which do not, and how to interpret that absence of data.

Future scenarios

Hypotheses with declared assumptions and the signals that would confirm or refute them.

How to cite

Every publication states its date, its scope and its limitations. Suggested format:

La Terra, E. J. (year). Article title. Cyber Threat Intelligence LATAM. Publication date. https://cyberthreatintelligence.lat/.

LinkedInProfessional profile and career.ORCIDResearcher profile and publications.ContactCollaboration with threat intelligence, fraud, risk and financial security teams in Latin America.