Government investigates invasion of Siafi payment system and possible diversion of funds

A major government payment platform was the target of a hack attack. About this subject Integrated Financial Management System (Siafi)It is mainly responsible for the processing and execution of the Union’s finances.

According to the newspaper Folha de S.PauloThe attack took place in April in multiple attempts. On this occasion, Many administrators’ accounts were accessed by unauthorized persons. Currently, the Brazilian Intelligence Agency (Abin) and the Federal Police are investigating the incident.

At worst, Those responsible for cybercrime may have executed irregular bank orders and diverted funds from the National TreasuryThe person responsible for Siafi. So far, the Ministry of Finance has not commented on the issue and the service continues to operate normally.

The Undersecretariat of Treasury was also the target of the attack three years ago

According to the report, the incident could happen as follows: Theft of CPF and password from gov.br platform Important people involved in the system. These victims may be targets Repeated attacks to collect passwords or improperly re-establish access to the system.

The security team detected the fraud when the CPF of a manager attempted to pay a bank order by the same person, which was against Siafi rules.

The first cases, heard at the beginning of the month, involved accounts held by House administrators and attempts to place bank orders through Pix.

Despite the warning sign It is not yet possible to assess whether the transfer has been successful or not. The National Treasure itself has already implemented additional security measures for user authenticationin addition to now only accepting digital certificates issued internally and accepted after previous access attempts.

The same Undersecretariat of Treasury was also the target of a ransomware attack in 2021. At that time, the vulnerability was in the internal network and did not cause serious damage to the system.