Threat research

CARLIY0S: targeting Latin American banks

Straiker reports AI supported attack operations targeting banks and payment providers in Latin America. Its reported target inventory is not a count of confirmed compromises.

Research report

Disclosed Oct 21, 2026Updated Oct 23, 2026Sources checked Oct 23, 2026 UTC

Region: Latin America
Research source: Straiker
Evidence: Single source

What the research establishes

Straiker describes an operation using multiple commercial models and reports a target set exceeding 400 financial institutions. Treat that figure as research about targeting, not confirmed victim totals.

Oktsec recommends using the report to focus existing exposure and access reviews.

Latin American financial services

Exposure review

0 of 3 complete

Identify relevant servicesMap public financial services and third party integrations against your existing threat model.Review access and credentialsCheck unnecessary privileges, exposed secrets and unusual model provider use in systems relevant to the report.Correlate with your evidenceCompare internal telemetry with the research. A named sector or target inventory does not establish compromise of your organization.

Sources

Technical facts come from these sources. Priorities and suggested reviews are Oktsec’s analysis.

CARLIY0S investigationStraiker · research · Checked Oct 23, 2026 UTC

Editorial record2 entries

Oct 23, 2026 UTCAdded to the local collection after reviewing original sources. Disclosure date is shown separately from Radar coverage.

Oct 23, 2026 UTCShortened the title and clarified the campaign scope for the incident workspace.

Oktsec Assessment

Choose what to review

Exposure check AI agent review

Radar email

Get incident alerts and briefings

Act now incidents and team briefings, with sources and recommended actions.

Checking availability…