Loading threat actor…
The Sinaloa Cartel is a major Mexico-based transnational criminal organization centered on large-scale drug trafficking, money laundering, and associated violence. It is widely associated with Joaquín “El Chapo” Guzmán Loera and includes factions and networks linked to the Beltrán Leyva Organization and Los Chapitos. The group has been implicated in trafficking fentanyl, cocaine, methamphetamine, and heroin into the United States and in maintaining cross-border financial and logistics networks. The organization has demonstrated interest in technical surveillance and cyber-enabled financial tradecraft. Testimony in U.S. proceedings indicated that the cartel acquired interception equipment capable of accessing communications and internet traffic. Separately, enforcement and blockchain-analysis reporting tied the cartel and affiliated facilitators to cryptocurrency-based laundering, including the use of digital assets to obscure drug proceeds, move value across borders, layer transactions through multiple wallets, and help finance purchases of precursor chemicals from Chinese suppliers and brokers. Reporting also links cartel-associated laundering to Chinese underground banking and trade-based money-laundering networks. Operationally, the Sinaloa Cartel combines traditional organized-crime violence with increasingly sophisticated financial concealment methods. Its cyber-relevant activity is best characterized by communications interception, crypto-enabled laundering, and collaboration with external facilitators rather than by a distinct standalone intrusion program. The group’s dominant motivation is financial gain.
Mallory correlates actor tradecraft and target patterns against your stack, your sector, and your geography. See overlap before they land.
5 distinct techniques observed across reporting, grouped by tactic. Hover any cell for the evidence excerpt; click through for MITRE's full description.
6 indicators attributed to this actor: domains, IPs, hashes, and other artifacts pulled from reporting. View more in app.
5 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
A major Mexican cartel referenced as conducting large-scale armed responses to state action and later fragmenting into warring factions, driving severe violence in Sinaloa.
The Sinaloa Cartel, including the Beltran Leyva Organization, is involved in large-scale drug trafficking and uses cryptocurrency to facilitate payments for fentanyl production and other cartel activities.
Uses cryptocurrency and Chinese money laundering networks to launder drug proceeds, move funds internationally, and support procurement of precursor chemicals for fentanyl and methamphetamine production.
Referenced as a Mexico-based drug cartel involved in fentanyl trafficking supply chains, purchasing precursor chemicals via Latin America-based brokers from China-based chemical suppliers; payments included Bitcoin.
Match sector + geo + tech-stack targeting against your real footprint.
Every observed MITRE ATT&CK technique, grouped by tactic.
Families this actor is known to deploy, with IOCs and behavior.
CVEs this actor has used in known campaigns.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Domains, IPs, and hashes tied to this actor, refreshed continuously.