PF identifies one of the attackers of the government payment system

The Federal Police identified one of the attackers of the Integrated Financial Administration System (Siafi). According to information obtained by Mail, together with sources in the corporation, investigators believe that the improper access to the system was carried out by a criminal organization. So far, one of the suspects involved has been identified.

The cracker, a technical term used to describe anyone who uses computer knowledge to cause damage and commit crimes, would have accessed the system using valid access credentials, but stolen from public servants who work in the management of government financial executions. The investigations are carried out in secrecy and try to identify everyone involved, as well as identify any resources that were misappropriated.

The suspicion is that criminals have accessed payment orders for funds totaling R$3.5 million. Information with gov.br access credentials would have been collected for months, silently, until enough data was gathered to carry out a large-scale attack.

In one of the attempts, the cracker would have tried to make a transfer via Pix, that is, instantaneous. But the system detected that the CPF, Pix key used, was the same between those who sent the payment and those who would receive it, which is prohibited by government rules. After that, the National Treasury would have started to require the use of a digital certificate.

However, even with the measure, attempts were identified to break into the system using digital certificates issued by private companies. Because of this, the rule began to require the use of certificates issued by the National Data Processing Service (Serpro). The Brazilian Intelligence Agency (Abin) is also monitoring the investigations.