BlackHex BrotherHood

BlackHex BrotherHood, also styled BlackHex Brotherhood, is a Spanish-language hacktivist cluster with a strong Venezuela-centered political identity and a broader Latin American victim footprint. The actor is publicly associated with the handles and aliases HvcKMvSoneria33, HvckMvSoneria33 and HackMasoneria33. Its primary Telegram channel identifies the group as “BlackHex Brotherhood” and attributes the channel to a stylized form of HvcKMvSoneria33, providing a strong continuity signal between the operator identity and the group brand.

Internal monitoring supplied for this profile records DDoS and web-defacement activity against institutions in Latin American countries. Public collection also shows an expanding information-exposure component: BlackHex-controlled or BlackHex-linked channels publish politically framed doxing material and breach/data-leak claims, while independent reporting in Mexico documented the exposure of more than 1,300 sensitive INAH student files. INAH later confirmed unauthorized extraction of sensitive information associated with irregular use of a privileged administrator account, although the institution did not attribute the access sequence to BlackHex.

The group’s public narrative is closely tied to #OpZeroCorruptionVzla, anti-corruption messaging and targeting of Venezuelan government, defense, public-security and politically symbolic entities. A Telegram channel using the display branding BlackHexBrotherHxxd states #BlackHexBrotherHood HEMOS REGRESADO, reinforcing a reactivation/continuity narrative in 2026. Public mirrors also preserve BlackHex-branded posts aimed at exposing individuals presented by the actor as corrupt or abusive officials.

The evidence base also demonstrates a meaningful credibility limitation. In July 2025, BlackHex/HvcKMvSoneria33 claimed a compromise of Paraguay’s armed forces and publication of sensitive military material; Paraguay’s defense minister publicly rejected the breach claim and stated that the files were public. This makes claim validation a central part of the profile rather than a peripheral caveat.

INFERENCE (confidence: medium): BlackHex BrotherHood is best modeled as a politically motivated Latin American disruption-and-exposure cluster whose operational value comes from combining availability attacks, public-site integrity attacks and information disclosure with rapid social amplification. Technical sophistication remains uncertain because the public record contains little reproducible evidence of intrusion tooling, exploitation chains or bespoke malware.