An alleged attack on the Civil Defense alert system, based on Cell Broadcast technology, triggered the sending of false alerts to cell phones in various Brazilian cities, generating concern about the security of critical infrastructure used to protect the population.  ESET, a leading company in proactive threat detection, contextualizes the case and analyzes different protection strategies related to this type of system.

According to a report issued by the Brazilian Federal Government and sent to the Federal Police (PF), the first messages were sent to Rio de Janeiro. Subsequently, residents of Curitiba, Brasília, São Paulo, Salvador, and other locations also received notifications classified as “extreme alert,” considered the highest level in the Civil Defense alert system. This type of message is used in situations of imminent risk to life, requiring the population to take immediate protective measures.

In the case of Rio de Janeiro, the message referred to a supposed possibility of landslides, particularly sensitive information in a region historically affected by tragedies related to heavy rains. Messages also circulated mentioning a supposed possibility of a tornado in the Belo Horizonte region (MG) and other unfounded warnings. The texts contained disjointed phrases, corrupted fields, and unusual expressions, including references to a supposed “alien attack.”

The incident occurs at a time when Latin America is facing a sustained increase in extreme weather events. According to the World Meteorological Organization (WMO), in recent years the region has been affected by phenomena such as floods, droughts, hurricanes, and large-scale forest fires, reinforcing the importance of early warning systems to protect the population.

“In this context, several countries in the region are adopting alert systems based on Cell Broadcast, a technology that allows mass messaging to be sent to all mobile devices in a specific area, without the need for applications or an internet connection,” explains Jonathan Ramos, Cybersecurity Researcher at ESET Latin America.

Some implementation examples in the region include:

• Chile is the most established case, with its Emergency Alert System (SAE) fully operational and regularly used in the event of natural disasters, while Brazil already has large-scale mobile alert infrastructure, as evidenced in this incident.
• Mexico has conducted trials in recent years, partially integrating Cell Broadcast into its seismic alert system. Other countries, such as Ecuador, are in the initial or pilot stages.
• Argentina is making progress in deploying its national AlertAR system, based on this technology.

A compromised alert system can generate panic, misinformation, and diminish the credibility of official emergency communications

“As governments adopt more efficient technologies to alert the population, the attack surface on critical systems also increases. A compromised alert system can generate panic, misinformation, and eventually diminish the credibility of official communications in real emergency situations,” highlights Ramos from ESET.

One detail that stood out in this case was the repetition of the word “misanthropy” in various messages, functioning as a kind of signature left by those responsible. The term is used to describe people who express aversion, distrust, or rejection of humanity and social coexistence.

The case is being investigated by the National Civil Defense in conjunction with the National Telecommunications Agency (Anatel). The suspicion is that the incident involved unauthorized access to the Public Alert Dissemination Interface (Idap), a platform used by the Ministry of Integration and Regional Development (MIDR), with the support of the National Civil Defense, to send alerts related to risks of natural disasters and other emergencies.

In the first hours after the incident, a user identified as “Misantropo” on the social network X posted images and a video claiming responsibility for the messages. The disseminated material suggests the use of a government platform to send the alerts.

In an interview with the TecMundo website, the alleged attacker claimed to have used old Idap credentials that had been exposed in previous leaks. According to his account, access was obtained through a technique known as credential stuffing, which involves the automated reuse of username and password combinations previously compromised in other incidents.

“Although the perpetrators and details of the intrusion are still under investigation, the incident reinforces the importance of adopting robust authentication mechanisms, continuous monitoring, and periodic credential reviews in systems considered critical to public safety,” ESET added.

The authorities responded by temporarily deactivating the platform. In an official statement, the Civil Defense of the state of São Paulo reported that the message received by the public was not issued by the agency and that it immediately initiated verification procedures together with the National Civil Defense, Anatel (the Brazilian telecommunications regulator), and other institutions involved in the system’s operation. “To date, there is no record of any event that would justify issuing an extreme alert related to the reported content,” the agency stated.

“The incident highlights the risks associated with protecting government systems responsible for essential services. Cyber ​​incidents on critical infrastructure platforms expose vulnerabilities that transcend the technological sphere, revealing flaws in security policies and procedures. The use of supposedly leaked credentials reinforces the urgency of governance practices, such as the application of the principle of least privilege, mandatory multi-factor authentication (MFA), and the periodic rotation of passwords. For systems with high social impact, the implementation of the Four-Eyes Principle is indispensable. This validation layer mitigates the risk of isolated actions, whether malicious or accidental, preventing false alerts from generating panic and misinformation, and above all, preserving public trust in legitimate state protection mechanisms,” concludes Jonathan Ramos of ESET.

The investigation should clarify whether there was indeed an intrusion into the Civil Defense systems or if the incident was caused by the misuse of valid credentials obtained from previous leaks.

ESET invites you to learn more about cybersecurity by visiting:  https://www.welivesecurity.com/es/.

For other useful preventative information, also available in Venezuela at:  https://www.eset.com/ve/,, and on their social media channels @eset_ve. Also on Instagram (@esetla) and Facebook (ESET).

With information and images provided by ESET and Comstat Rowland

Follow our news on Google! For current, interesting, and accurate information, click here to see all the content on Bitfinance.news. You can also find us on X/Twitter and Instagram

La entrada Automated alerts in Brazil with fake “extreme emergency” calls alarmed the population apareció primero en Bitfinance.

Microsoft issued an alert regarding cryptocurrency theft through the release of malware when an infected USB drive is connected to a computer.

The attack targets crypto wallets on Windows computers. The threat is particularly novel because it doesn’t involve the user opening a suspicious link; instead, it is triggered by inserting the infected USB drive.

“The worm intercepts stored shortcut files.” Once the user opens a file on a Windows computer, “the system silently runs an installer that places the worm on the computer.”

When activated, the malware monitors the Windows clipboard in real time. “Every time it detects a copied crypto wallet address, it replaces it with the attacker’s address. The user believes they are sending funds to the correct address; the real destination is another wallet.”

Copy and paste operations in cryptocurrency transactions such as Bitcoin, Ethereum, XRP, USDT, USDC, and any stablecoin are intercepted.

This worm is more difficult to detect because it operates in the background; there are no pop-up windows to alert the user, and it can only be noticed by reviewing the transaction history on the blockchain.

Experts mention some measures to protect your crypto wallet, such as “always verifying the last four characters of the pasted address before confirming any transfer, comparing them with the address displayed on the recipient’s screen.”

In addition, never connect USB drives of unknown origin to the computers used to manage crypto assets. This warning applies generally to any file query or download.

Furthermore, they recommend “using a hardware wallet with its own screen that displays the destination address independently of the Windows clipboard, since the transaction signature is performed on the physical device and not on the potentially compromised computer.”

M.Pino

Source: cripto247

(Reference image source: Patrick Ladner on Unsplash)

Follow our news on Google! For current, interesting, and accurate information, click here to see all the content on Bitfinance.news. You can also find us on X/Twitter and Instagram

La entrada Malware steals cryptocurrency by connecting a USB drive to a computer apareció primero en Bitfinance.

Football fans are eagerly anticipating the 2026 World Cup. However, the sporting event is becoming a hotbed of fraudulent activity aimed at deceiving the public with dubious offers.

In several countries, warnings have been issued about the sale of counterfeit collectible albums and stickers, particularly in cases of street purchases, without any commercial backing. Despite the buyer’s responsibility, this is an act of bad faith towards fans who trust in acquiring genuine items at low prices.

On the other hand, there are accommodation offers at prices that suggest a scam. In these cases, the recommendation is to look for packages from verified tour operators and establish direct contact with the company to avoid falling victim to scams.

A greater risk of being deceived lies in online promotions and offers for items related to soccer teams, such as jerseys, caps, team bags, and sports brands.

Cybercriminals take advantage of this to lead internet users down false paths and install malicious software to steal personal information for criminal purposes.

Prevention and common sense

It is important to remain alert to any indication of dubious offers or promotions. Ideally, avoid accessing unknown websites, pop-up windows that appear automatically while browsing, and emails from unknown or unverified senders.

Likewise, be wary of incredible offers; that is, promotions that are, even, ridiculous.

Remember that no platform can request passwords or banking information. Sending authentication codes is essential during online searches to protect sensitive data.

M.Pino

With information from national and international media

(Main reference image source: My Profit Tutor on Unsplash)

Follow our news on Google! For current, interesting, and accurate information, click here to see all the content on Bitfinance.news. You can also find us on X/Twitter and Instagram

La entrada Online scams related to the 2026 World Cup are on the rise apareció primero en Bitfinance.