{"id":82,"date":"2026-03-07T20:41:00","date_gmt":"2026-03-08T01:41:00","guid":{"rendered":"https:\/\/www.gworks-ec.com\/cloud4u\/?page_id=82"},"modified":"2026-03-10T16:59:02","modified_gmt":"2026-03-10T21:59:02","slug":"actores-de-amenazas-2026","status":"publish","type":"page","link":"https:\/\/www.gworks-ec.com\/cloud4u\/actores-de-amenazas-2026\/","title":{"rendered":"Actores de amenazas 2026"},"content":{"rendered":"\n


<\/p>\n\n\n

\n
\n
CompTIA Security+ \u00b7 Threat Intelligence Update \u00b7 2026<\/div>\n

Actores de Amenaza<\/span><\/h1>\n

Categor\u00edas actualizadas \u00b7 Motivaci\u00f3n \u00b7 Impacto real \u00b7 Nuevas taxonom\u00edas 2026<\/p>\n

Cr\u00e9ditos: Sheila I. P\u00e9rez de \u00c1vila<\/p>\n

<\/div>\n<\/header>\n
\n
89%<\/span><\/p>\n
\u2191 ataques con IA<\/div>\n<\/div>\n
27s<\/span><\/p>\n
Tiempo r\u00e9cord breakout<\/div>\n<\/div>\n
85<\/span><\/p>\n
Grupos ransomware<\/div>\n<\/div>\n
82%<\/span><\/p>\n
Ataques sin malware<\/div>\n<\/div>\n
$4.82M<\/span><\/p>\n
Costo brecha cr\u00edtica<\/div>\n<\/div>\n
12.6M<\/span><\/p>\n
Emails maliciosos<\/div>\n<\/div>\n<\/div>\n
\n
\n
\n
\ud83d\udcb0<\/div>\n
\n
Cibercriminales & RaaS<\/div>\n
Evoluci\u00f3n cr\u00edtica 2025<\/div>\n<\/div>\n<\/div>\n
\n
Motivaci\u00f3n<\/div>\n
Ganancia financiera.<\/strong> Modelo industrializado con afiliados, RaaS y marketplaces.<\/div>\n
Novedades 2025<\/div>\n
85 grupos activos. Doble\/triple extorsi\u00f3n<\/strong> est\u00e1ndar. IA para phishing. Qilin, DragonForce, FunkSec<\/strong> con modelo cartel-style.<\/div>\n
\n
Impacto actual<\/div>\n
Financiero<\/span><\/p>\n
\n
<\/div>\n<\/div>\n

97%<\/span><\/div>\n

Operativo<\/span><\/p>\n
\n
<\/div>\n<\/div>\n

90%<\/span><\/div>\n

Reputaci\u00f3n<\/span><\/p>\n
\n
<\/div>\n<\/div>\n

85%<\/span><\/div>\n<\/div>\n

ransomware<\/span>extorsi\u00f3n<\/span>RaaS<\/span>IA ofensiva<\/span>cloud<\/span><\/div>\n<\/div>\n<\/div>\n
\n
\n
\ud83c\udff4<\/div>\n
\n
Estado-Naci\u00f3n \/ APT<\/div>\n
Amenaza persistente<\/div>\n<\/div>\n<\/div>\n
\n
Motivaci\u00f3n<\/div>\n
Espionaje y geopol\u00edtica.<\/strong> Acceso persistente a infraestructura cr\u00edtica.<\/div>\n
Actores 2025<\/div>\n
Salt Typhoon<\/strong> (China): telecom EE.UU. APT27\/APT31<\/strong>: ToolShell. Corea del Norte<\/strong>: ransomware contra salud.<\/div>\n
\n
Impacto actual<\/div>\n
Seguridad<\/span><\/p>\n
\n
<\/div>\n<\/div>\n

98%<\/span><\/div>\n

Infraestruc.<\/span><\/p>\n
\n
<\/div>\n<\/div>\n

92%<\/span><\/div>\n

Persistencia<\/span><\/p>\n
\n
<\/div>\n<\/div>\n

95%<\/span><\/div>\n<\/div>\n

APT<\/span>espionaje<\/span>zero-day<\/span>supply chain<\/span><\/div>\n<\/div>\n<\/div>\n
\n
\n
\u270a<\/div>\n
\n
Hacktivistas<\/div>\n
Convergencia con APTs<\/div>\n<\/div>\n<\/div>\n
\n
Motivaci\u00f3n<\/div>\n
Ideolog\u00eda pol\u00edtica.<\/strong> Fusi\u00f3n con operaciones de estados-naci\u00f3n.<\/div>\n
Novedades 2025<\/div>\n
SideCopy<\/strong> (Pakistan): espionaje + hacktivismo. D4RK4RMY<\/strong>: ransomware con propaganda.<\/div>\n
\n
Impacto actual<\/div>\n
Disrupci\u00f3n<\/span><\/p>\n
\n
<\/div>\n<\/div>\n

75%<\/span><\/div>\n

Reputaci\u00f3n<\/span><\/p>\n
\n
<\/div>\n<\/div>\n

80%<\/span><\/div>\n

DDoS<\/span><\/p>\n
\n
<\/div>\n<\/div>\n

70%<\/span><\/div>\n<\/div>\n

DDoS<\/span>defacement<\/span>propaganda<\/span><\/div>\n<\/div>\n<\/div>\n
\n
\n
\ud83d\udc64<\/div>\n
\n
Insiders \/ Amenaza Interna<\/div>\n
Vectores ampliados<\/div>\n<\/div>\n<\/div>\n
\n
Motivaci\u00f3n<\/div>\n
Econ\u00f3mica o coerci\u00f3n.<\/strong> Empleados reclutados por ransomware.<\/div>\n
Novedades 2025<\/div>\n
Scattered Spider<\/strong> recluta empleados. 82% ataques sin malware<\/strong>. Deepfakes y vishing.<\/div>\n
\n
Impacto actual<\/div>\n
Datos<\/span><\/p>\n
\n
<\/div>\n<\/div>\n

88%<\/span><\/div>\n

Detecci\u00f3n<\/span><\/p>\n
\n
<\/div>\n<\/div>\n

93%<\/span><\/div>\n

Financiero<\/span><\/p>\n
\n
<\/div>\n<\/div>\n

82%<\/span><\/div>\n<\/div>\n

credenciales<\/span>vishing<\/span>reclutamiento<\/span><\/div>\n<\/div>\n<\/div>\n
\n
\n
\ud83e\udd16<\/div>\n
\n
Actores de Bajo Perfil<\/div>\n
AI-Enabled<\/div>\n<\/div>\n<\/div>\n
\n
Motivaci\u00f3n<\/div>\n
Reconocimiento o ganancia.<\/strong> La IA eleva su capacidad sin habilidad t\u00e9cnica.<\/div>\n
Novedades 2025<\/div>\n
RaaS + IA democratizados. AiLock<\/strong> vende ransomware con IA por $400\u2013$1,200 USD.<\/div>\n
\n
Impacto actual<\/div>\n
Volumen<\/span><\/p>\n
\n
<\/div>\n<\/div>\n

90%<\/span><\/div>\n

Sofisticaci\u00f3n<\/span><\/p>\n
\n
<\/div>\n<\/div>\n

55%<\/span><\/div>\n

Crecimiento<\/span><\/p>\n
\n
<\/div>\n<\/div>\n

85%<\/span><\/div>\n<\/div>\n

IA ofensiva<\/span>RaaS<\/span>phishing<\/span><\/div>\n<\/div>\n<\/div>\n
\n
\n
\ud83d\udca5<\/div>\n
\n
Ciberterroristas<\/div>\n
Guerra h\u00edbrida<\/div>\n<\/div>\n<\/div>\n
\n
Motivaci\u00f3n<\/div>\n
Terror y desestabilizaci\u00f3n.<\/strong> Ataques a infraestructura cr\u00edtica.<\/div>\n
Novedades 2025<\/div>\n
L\u00ednea borrada con guerra estatal. Ataques OT\/ICS con firmware. Energ\u00eda: +500% ransomware.<\/div>\n
\n
Impacto actual<\/div>\n
Infraestruc.<\/span><\/p>\n
\n
<\/div>\n<\/div>\n

92%<\/span><\/div>\n

Vidas<\/span><\/p>\n
\n
<\/div>\n<\/div>\n

70%<\/span><\/div>\n

Recuperaci\u00f3n<\/span><\/p>\n
\n
<\/div>\n<\/div>\n

88%<\/span><\/div>\n<\/div>\n

OT\/ICS<\/span>SCADA<\/span>firmware<\/span><\/div>\n<\/div>\n<\/div>\n
\n
NUEVO 2025<\/div>\n
\n
\ud83d\udd11<\/div>\n
\n
Initial Access Brokers<\/div>\n
Nueva categor\u00eda<\/div>\n<\/div>\n<\/div>\n
\n
Motivaci\u00f3n<\/div>\n
Venta de accesos.<\/strong> Credenciales, VPNs, RDPs en darknet.<\/div>\n
Novedades 2025<\/div>\n
Infostealer como vector principal. Huione Guarantee<\/strong> proces\u00f3 $27B.<\/div>\n
\n
Impacto actual<\/div>\n
Habilitaci\u00f3n<\/span><\/p>\n
\n
<\/div>\n<\/div>\n

95%<\/span><\/div>\n

Escala<\/span><\/p>\n
\n
<\/div>\n<\/div>\n

90%<\/span><\/div>\n

Invisibilidad<\/span><\/p>\n
\n
<\/div>\n<\/div>\n

88%<\/span><\/div>\n<\/div>\n

infostealer<\/span>credenciales<\/span>darknet<\/span><\/div>\n<\/div>\n<\/div>\n
\n
NUEVO 2025<\/div>\n
\n
\ud83e\udde0<\/div>\n
\n
Actores AI-Driven<\/div>\n
Categor\u00eda emergente<\/div>\n<\/div>\n<\/div>\n
\n
Motivaci\u00f3n<\/div>\n
Automatizaci\u00f3n y escala.<\/strong> IA generativa para phishing y malware.<\/div>\n
Novedades 2025<\/div>\n
ChatGPT 550% m\u00e1s<\/strong> en foros. FunkSec y AiLock<\/strong> usan GenAI. Deepfakes.<\/div>\n
\n
Impacto actual<\/div>\n
Velocidad<\/span><\/p>\n
\n
<\/div>\n<\/div>\n

98%<\/span><\/div>\n

Escala<\/span><\/p>\n
\n
<\/div>\n<\/div>\n

95%<\/span><\/div>\n

Evasi\u00f3n<\/span><\/p>\n
\n
<\/div>\n<\/div>\n

90%<\/span><\/div>\n<\/div>\n

GenAI<\/span>deepfake<\/span>malware aut\u00f3nomo<\/span>LLM<\/span><\/div>\n<\/div>\n<\/div>\n
\n
\u26a0\ufe0f<\/div>\n
\n
Tendencia cr\u00edtica 2025\u20132026: Convergencia<\/div>\n
La frontera entre categor\u00edas ha desaparecido. Estado-naci\u00f3n + Ransomware:<\/strong> Storm-2603 mezcla APT con extorsi\u00f3n. Hacktivistas + APTs:<\/strong> SideCopy opera como esp\u00eda y activista. En 2026: menor frecuencia, mayor impacto<\/strong>.<\/div>\n<\/div>\n<\/div>\n<\/div>\n
\n Fuentes: CrowdStrike Global Threat Report 2025 \u00b7 Darktrace Mid-Year Review \u00b7 Cyble \u00b7 CYFIRMA \u00b7 CyberProof \u00b7 Deloitte CTI
\nActualizado: Marzo 2026 \u00b7 CompTIA Security+ SY0-701<\/div>\n<\/div>","protected":false},"excerpt":{"rendered":"

CompTIA Security+ \u00b7 Threat Intelligence Update \u00b7 2026 Actores de Amenaza Categor\u00edas actualizadas \u00b7 Motivaci\u00f3n \u00b7 Impacto real \u00b7 Nuevas […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"site-sidebar-layout":"no-sidebar","site-content-layout":"","ast-site-content-layout":"full-width-container","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"disabled","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"class_list":["post-82","page","type-page","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.gworks-ec.com\/cloud4u\/wp-json\/wp\/v2\/pages\/82","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.gworks-ec.com\/cloud4u\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.gworks-ec.com\/cloud4u\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.gworks-ec.com\/cloud4u\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.gworks-ec.com\/cloud4u\/wp-json\/wp\/v2\/comments?post=82"}],"version-history":[{"count":19,"href":"https:\/\/www.gworks-ec.com\/cloud4u\/wp-json\/wp\/v2\/pages\/82\/revisions"}],"predecessor-version":[{"id":277,"href":"https:\/\/www.gworks-ec.com\/cloud4u\/wp-json\/wp\/v2\/pages\/82\/revisions\/277"}],"wp:attachment":[{"href":"https:\/\/www.gworks-ec.com\/cloud4u\/wp-json\/wp\/v2\/media?parent=82"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}