Reports
Research and analysis on digital financial fraud in Latin America.
OMEGATECH · TLP:CLEAR
Omegatech: Seychelles, fraud infrastructure and the connection to TALE-VAULT
An investigation into Omegatech: Seychelles, malware, abuse notices, infrastructure reputation and four documented chains connected to TALE-VAULT.
October 19, 2026 · Independent investigation
TALE-VAULT: 3,622 domains, 42 samples and the technical architecture of lead capture
Full technical report: destination rotation, nine brands with a shared configuration, visit measurement and four verified paths from entries hosted at OmegaTech.
Every report, in one place
The seven entries retain their destinations and formats. Summaries follow this candidate’s text, while reference dates and PDFs remain historical. See the dataset citability criteria when evaluating a citation.
Ads, chats and forms observed on 30 September and 1 October 2026. Separates evidence, assessments and indicators; no common operator is established.
Strategic whitepaperSessions, identity and movement of funds as an analytical framework for coverage limits when controls are assessed in isolation. Evidence, scope and source limits are explicit.
AiTM technical briefSession-theft mechanisms, chronology and source limitations. A case absent from the corpus does not demonstrate the absence of incidents in LATAM.
Report 2023–2026What is known about banking malware in LATAM, and whose evidence supports it. Examines 56 families and documentary dependence, with cutoff 17 September 2026.
Correo Argentino fraud kitSix signals in the journey and a chat requesting card details. Distinguishes observation from the issuer-validation hypothesis.
Investigation “Argentina LNG”The YPF-branded “Argentina LNG” campaign, historical observation and a single-source international-link hypothesis. Shared infrastructure is not confirmed campaign membership.
“Argentina LNG” alertAlert about the investment offer observed on 28 August 2026. It is not a check that the form remains active today.
Who it is for
Use depends on the document’s function, not a blanket promise of coverage or fraud reduction.
Locate the investigation and its limits before taking a conclusion to a committee.
Distinguish lures, channels and case stages before comparing with first-party complaints.
Find dated references and indicators to test against first-party telemetry.
Communicate documentation without extrapolating prevalence or attributing unestablished actors.
What it is not
This is not an attack ranking, monitoring service or guarantee of fraud reduction. A report, whitepaper and alert serve different purposes. Dates and limitations must accompany reuse.
Ezequiel Jorge La Terra · ORCID 0009-0008-1677-4218 · Text licensed under CC BY 4.0.
How to cite: La Terra, E. J. (2026). Financial fraud research library for Latin America. Cyber Threat Intelligence LATAM. https://cyberthreatintelligence.lat/en/report/