Loading threat actor…
The Sinaloa Cartel, also known as Cártel de Sinaloa (CDS), is a Mexico-based transnational drug-trafficking organization. The United States designated the organization as a Foreign Terrorist Organization in early 2025. It is associated with illicit narcotics trafficking and criminal financial activity. The organization has been linked to use of cryptocurrency-related mechanisms, including alleged cryptocurrency-mining operations, to diversify revenue and launder illicit proceeds.
Mallory correlates actor tradecraft and target patterns against your stack, your sector, and your geography. See overlap before they land.
Who, where, and (when attributed) which flag flies behind the operation. Pulled from open-source reporting and Mallory's analyst review.
Attributed origin per open-source reporting.
1 distinct technique observed across reporting, grouped by tactic. Hover any cell for the evidence excerpt; click through for MITRE's full description.
2 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
Reportedly establishes cryptocurrency farms to mine digital assets as part of criminal revenue diversification and money-laundering activity.
Mexican cartel referenced as having been designated a foreign terrorist organization in early 2025, increasing compliance and terrorism-financing risk for transactions linked to its network.
Match sector + geo + tech-stack targeting against your real footprint.
Every observed MITRE ATT&CK technique, grouped by tactic.
Families this actor is known to deploy, with IOCs and behavior.
CVEs this actor has used in known campaigns.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Domains, IPs, and hashes tied to this actor, refreshed continuously.