Loading story…
Following the U.S. raid in Caracas that resulted in the capture and extradition of Venezuelan President Nicolás Maduro and his wife, a surge of disinformation and misinformation campaigns emerged online. Social media platforms were quickly inundated with fake images, AI-generated videos, and recycled footage from unrelated conflicts, all purporting to show details of the operation or its aftermath. Some of these narratives falsely linked the raid to longstanding conspiracy theories about Venezuela manipulating U.S. voting machines, while others sought to portray the U.S. as an imperialist aggressor. Disinformation researchers observed that these tactics were typical for high-profile geopolitical events, with the intent to shape public perception and fill the information vacuum left by official silence.
Despite the volume and sophistication of these campaigns, analysts noted that there was no clear evidence of coordination by a foreign government at this stage. The disinformation efforts were characterized by opportunistic actors leveraging AI tools and social media virality to amplify misleading or false narratives. The rapid spread of such content highlights the ongoing challenge of information integrity during major international incidents, especially when official details are scarce and public interest is high.
Track how attackers are adapting to this technology.
3 events from the most recent confirmed update back to the earliest known activity.
By the next day, analysts were tracking the disinformation activity for signs of broader cyber threats or foreign-government coordination. At that point, observers said there was no evidence the influence activity was being directed by a foreign state, though the situation remained under watch.
Following the raid and the Trump administration's minimal public explanation, online disinformation rapidly spread, including AI-generated and recycled media falsely depicting the event. Researchers observed especially heavy activity in Spanish-language communities, along with domestic conspiracy narratives tying the operation to false claims about Venezuelan interference in the 2020 U.S. election.
U.S. armed forces and law enforcement conducted a surprise operation in Caracas that resulted in the capture of Venezuelan president Nicolás Maduro and his wife, who were then flown to the United States to face criminal charges. The operation was carried out without prior notification to allies or Congress.
Follow how adversaries are adapting to this technology, and where it touches your stack today.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
The United States conducted a large-scale military operation in Venezuela, targeting multiple locations including military installations and residential areas. The raid involved airstrikes, with Bellingcat identifying remnants of an AGM-88 missile at a residential building in Catia La Mar, resulting in civilian casualties. US forces reportedly captured President Nicolas Maduro and First Lady Cilia Flores, with the operation causing significant fatalities among both civilians and military personnel, including Cuban and Venezuelan soldiers. The attack also followed a series of strikes on alleged drug boats in the region. Amid the military action, speculation arose regarding possible cyber operations preceding the raid. A red team engineer observed unusual BGP routing activity involving Venezuela's state-owned telecom, CANTV, on the day before the attack. The anomalies suggested the potential for a man-in-the-middle attack, possibly enabling surveillance or disruption of communications. While Cloudflare reviewed these claims and expressed skepticism about direct links between the BGP incidents and the US operation, the timing and nature of the network events have prompted calls for further investigation into the electronic aspects of the attack.
Jun 29, 2026
CIA Deputy Director Michael Ellis said the agency's cyber operations were central to the intelligence picture supporting **Operation Absolute Resolve**, in which U.S. special operations forces located and apprehended Venezuelan President Nicolás Maduro and his wife in Caracas. According to Ellis, cyber-enabled intelligence identified Maduro's location and allowed forces to apprehend him within four minutes of arriving on the ground; he did not disclose the systems, sources, methods, or validation processes involved. Ellis cited the operation in support of elevating the CIA's Center for Cyber Intelligence into a standalone **Cyber Mission Center**, intended to improve prioritization, reporting, agility, and resource alignment. He also highlighted the Directorate of Mission Systems, faster technology acquisition, and AI-assisted collection and analysis, while emphasizing human oversight and avoidance of dependence on a single AI model or vendor. Although some reports attributed power outages during the operation to a cyberattack, experts noted that visible physical attacks could also have caused them.
Sep 9, 2026
The United States conducted a military operation in Caracas, Venezuela, resulting in multiple explosions and the removal of the country's authoritarian president to face narco-terrorism charges. During the operation, a significant power outage occurred in Caracas, prompting speculation about the involvement of a cyberattack, especially as U.S. Cyber Command was named among the agencies participating in the strikes. President Donald Trump alluded to the use of "a certain expertise" in causing the blackout, but did not confirm a cyber operation. Military officials stated that the operation involved coordinated efforts from Space Command, Cyber Command, and other interagency partners to facilitate the mission. While there is no official confirmation that a cyberattack was responsible for the grid outage, the incident is being compared to previous cases, such as the Russian cyberattack on Ukraine's power grid in 2023, which coincided with kinetic military actions. The lack of clear attribution leaves open questions about the role of cyber capabilities in the U.S. operation against Venezuela's critical infrastructure.
Jun 29, 2026