CYBER PRESSURE, THE PDVSA INCIDENT, AND THE CAPTURE OF NICOLÁS MADURO: AN OPEN-SOURCE ASSESSMENT

Authors

  • João Marcos Barbosa Oliveira Escola de Aperfeiçoamento de Oficiais (ESAO)
  • Ismael Deus Marques Fundação Getúlio Vargas (FGV)
  • Jovair Pazzini de Melo Souza Escola de Aperfeiçoamento de Oficiais (ESAO)
  • Eduardo Stefani Universidade Nove de Julho (UNINOVE)

DOI:

https://doi.org/10.18623/rvd.v23.5479

Keywords:

Cyber Pressure, PDVSA, Operation Resolute, Venezuela

Abstract

The capture of Venezuelan President Nicolás Maduro in January 2026 was preceded by a series of non‑kinetic events that reshaped the operational environment in Venezuela. Among these, a cyber incident affecting Petróleos de Venezuela S.A. (PDVSA) in December 2025 stands out as a relevant case of cyber pressure applied against critical infrastructure in the theater of operations. This article analyzes the PDVSA cyber incident using open‑source information to assess its characteristics, documented impacts, and strategic relevance as contextual cyber pressure preceding a limited regime intervention. Rather than asserting direct causality between the PDVSA incident and the subsequent capture operation, the article situates the incident within broader discussions on cyber‑enabled coercion, infrastructure vulnerability, and ambiguity in attribution. The study contributes an empirically grounded case analysis to the emerging literature on cyber operations as shaping mechanisms in contemporary conflict.

References

[1] Rid, T. (2020). Active Measures: The Secret History of Disinformation and Political Warfare. Farrar, Straus and Giroux.

[2] Reuters. (2025, December 15). Venezuela’s PDVSA says operations unaffected by cyber attack, blames U.S. https://www.reuters.com/world/americas/ venezuelas-pdvsa-says-operations-unaffected-by-cyber-attack-blames-us-2025-12-15/

[3] DiMolfetta, D. (2026, January 28). US developed ‘non-kinetic’ cell ahead of Venezuela mission to push cyber operations. Nextgov/FCW. https://www.nextgov.com/cybersecurity/2026/01/us-developed-non-kinetic-cell-ahead-venezuela-mission-push-cyber-operations/411029/

[4] Lindsay, J. R. (2013). Stuxnet and the limits of cyber warfare. Security Studies, 22(3), 365–404.

[5] Nye, J. S. (2017). Deterrence and dissuasion in cyberspace. International Security, 41(3), 44–71.

[6] Gartzke, E., & Lindsay, J. R. (2015). Weaving tangled webs: Offense, defense, and deception in cyberspace. Security Studies, 24(2), 316–348.

[7] Schmitt, M. N. (Ed.). (2017). Tallinn Manual 2.0 on the International Law Applicable to Cyber Operations. Cambridge University Press.

[8] Moore, D. (2022). Offensive cyber operations: Understanding intangible warfare. Oxford University Press.

[9] Bennett, A., & Checkel, J. T. (2015). Process Tracing and the Social Sciences. Cambridge University Press.

[10] Ggangix. (2024). Venezuela Digital Observatory. GitHub repository. https://github.com/ggangix/venezuela-digital-observatory

[11] Bloomberg. (2026, January 15). Venezuelan oil industry runs on WhatsApp after cyber attack. https://www.bloomberg.com/news/articles/2026-01-15/ venezuelan-oil-industry-is-running-on-whatsapp-after-cyberattack

[12] The Record. (2025). Venezuela state oil company blames cyberattack on U.S., offers no evidence. https://therecord.media/venezuela-state-oil-company- blames-cyberattack-on-us

[13] Jobsamuel. (2023). venezuela-json: Geospatial data of Venezuelan administrative divisions. GitHub repository. https://github.com/jobsamuel/venezuela-json

[14] Ringmast4r. (2025). Crystal Vault: Venezuela OSINT Dashboard. https://ringmast4r.github.io/crystal-vault/

[15] NetBlocks (2026). Confirmed internet connectivity disruptions in parts of Caracas during power outages. NetBlocks. https://x.com/netblocks/status/ 2007434366545174662

[16] Cloudflare (2026). A closer look at a BGP anomaly in Venezuela. Cloudflare Blog. https://blog.cloudflare.com/bgp-route-leak-venezuela/

[17] The Register. (2026). Venezuela BGP routing incident likely misconfiguration, not cyberattack.

[18] RIPE NCC. (2026). RIPEstat: BGP Update Activity for AS8048. Réseaux IP Européens Network Coordination Centre. https://stat.ripe.net/

[19] CAIDA. (2024). Internet Outage Detection and Analysis (IODA): Methodology and Platform Overview. Center for Applied Internet Data Analysis. https://www.caida.org/projects/ioda/

[20] Healey, J. (2026). The case for cyber pressure against Venezuela. Lawfare. https://www.lawfaremedia.org/article/the-case-for-cyber-pressure-against-venezuela

[21] Takove. (2023). La Memoria de Venezuela. GitHub repository. https://github.com/takove/la-memoria-de-venezuela

Downloads

Published

2026-03-20

How to Cite

Oliveira, J. M. B., Marques, I. D., Souza, J. P. de M., & Stefani, E. (2026). CYBER PRESSURE, THE PDVSA INCIDENT, AND THE CAPTURE OF NICOLÁS MADURO: AN OPEN-SOURCE ASSESSMENT. Veredas Do Direito, 23(5), e235479. https://doi.org/10.18623/rvd.v23.5479

Issue

Vol. 23 No. 5 (2026): Veredas do Direito, v. 23, n. 5 2026

Section

Articles

License

I (we) submit this article which is original and unpublished, of my (our) own authorship, to the evaluation of the Veredas do Direito Journal, and agree that the related copyrights will become exclusive property of the Journal, being prohibited any partial or total copy in any other part or other printed or online communication vehicle dissociated from the Veredas do Direito Journal, without the necessary and prior authorization that should be requested in writing to Editor in Chief. I (we) also declare that there is no conflict of interest between the articles theme, the author (s) and enterprises, institutions or individuals.

I (we) recognize that the Veredas do Direito Journal is licensed under a CREATIVE COMMONS LICENSE.

 

Licença Creative Commons Attribution 3.0