Brazil Ministry: Hacker Learned to Send False Alerts Through Government Courses
Brazil's Ministry of Integration and Regional Development has informed the Chamber of Deputies that the hacker responsible for sending a false extreme alert from the Civil Defense system learned how to issue such warnings through government-provided courses. The incident occurred between the night of June 19 and the early morning of June 20, when a loud alert was sent to mobile phones across various Brazilian cities. These messages, which included the word "misanthropy" or variations thereof, falsely warned of non-existent risks, with some even mentioning a supposed "alien attack." The ministry stated that a hacker, identifying as Misantropi4, used valid credentials from the IDAP platform, learned the alert system through government training, and then deployed the false Civil Defense alerts. This explanation was provided in response to an information request from Deputy Gustavo Gayer (PL-GO). The ministry became aware of the breach at 11:59 PM on June 19, immediately blocking the compromised accounts and temporarily disabling external publication of the alerts. The Federal Police are currently investigating the matter. The ministry confirmed that leaked credentials from a Telegram group were exploited, along with a system vulnerability, to send the alerts, noting that both issues have since been rectified. They emphasized that the ministry's core infrastructure was not compromised and that corrective cybersecurity measures have been implemented, including blocking the misused user accounts, restricting system access to the internal MIDR network, implementing multi-factor authentication, and requiring Civil Defense agencies to connect via VPNs.
The incident highlights a critical vulnerability in public alert systems, where an individual with access to government training and valid credentials could exploit the platform for malicious purposes. This raises questions about the security protocols surrounding access to government training materials and the vetting process for platform users. While the ministry has implemented corrective measures such as multi-factor authentication and VPN access, the initial breach underscores the need for continuous security audits and robust threat modeling for all critical infrastructure. The future of public safety communication will increasingly rely on secure, resilient, and verifiable digital channels, demanding proactive cybersecurity strategies that anticipate and mitigate evolving threats, especially as AI-driven disinformation campaigns become more sophisticated.
AI-generated to prompt reflection — not editorial opinion, not advice, not a statement of fact. How this works.