✓ verbatim from the press
Approximately 30 million people across eight Brazilian capitals received false Civil Defense alerts early Saturday (20th), according to Agência Brasil. The messages — classified as "extreme level" and containing terms like "misanthropy" and "alien attack" — were sent using credentials of two Pará Civil Defense agents authorized to operate only within Pará territory, as revealed by Folha de S.Paulo. ✓
Press quotes (2)
"Conforme a Agência Brasil apurou, uma análise preliminar aponta que os diferentes alertas chegaram a moradores de Belo Horizonte (MG), Brasília (DF), Campo Grande (MS), Curitiba (PR), Rio Branco (AC), Rio de Janeiro (RJ), Salvador (BA) e São Paulo (SP). Somadas, essas cidades reúnem cerca de 30 milhões de pessoas."
"os alertas foram enviados a partir das credenciais de acesso de dois agentes da Defesa Civil do Pará que estavam autorizados a enviar avisos apenas para o território paraense."
The ten alerts were sent between 11:41 PM Friday (19th) and 1:23 AM Saturday. The first message, directed to Rio de Janeiro state at 11:41 PM, read "misantropo ADRESS RJ burros dms pprt." Four minutes later, Curitiba received another message containing only "misantropia." Between 1:20 and 1:23 AM, eight new alerts were sent — most with the term "misantropi4" — to São Paulo, Rio de Janeiro, Salvador, Belo Horizonte, Curitiba, Rio Branco, Brasília, and Campo Grande, plus smaller municipalities in São Paulo, Rio de Janeiro, and Mato Grosso do Sul. ✓
Press quotes (3)
"A primeira mensagem chegou para moradores do estado do Rio de Janeiro e foi enviada às 23h41, de acordo com relatório ao qual a Folha teve acesso. "Misantropo ADRESS RJ burros dms pprt", afirmava o texto."
"A segunda mensagem foi enviada a Curitiba quatro minutos depois, às 23h45, apenas com a palavra "misantropia"
"Os alertas de "misantropia" e "ataque alienígena", entre outros textos, chegaram a celulares de seis capitais (São Paulo, Rio de Janeiro, Salvador, Belo Horizonte, Curitiba e Rio Branco), além da população de diversos municípios de São Paulo, Rio de Janeiro, Mato Grosso do Sul e Distrito Federal."
According to a Ministry of Integration document sent to Federal Police, "an aspect that aggravates the occurrence is that the two users identified in the records have state-level profiles linked to Pará State, but the suspicious alerts were directed to localities and federal units outside their authorization area." The federal government blocked the first credential after the first two dispatches, but those responsible immediately activated a second account linked to the same state agency. ✓
Press quotes (2)
"Um aspecto que agrava a ocorrência é que os dois usuários identificados nos registros possuem perfil estadual vinculado ao Estado do Pará, mas os alertas suspeitos foram direcionados para localidades e unidades federativas fora de sua área de autorização"
"O governo federal declarou a investigadores ter bloqueado a primeira conta usada para enviar os alertas falsos assim que os primeiros avisos foram detectados. Depois disso, porém, os responsáveis pelo envio dos comunicados passaram a utilizar a segunda credencial."
Federal Police opened a preliminary investigation to determine whether there was a cyberattack. The national secretary of Protection and Civil Defense, Wolnei Wolff, stated at a Saturday press conference that "everything indicates it is not someone from the National System, nor someone from Civil Defense registered by the National Secretariat with regular system access. This leads us to believe it was a hacker attack, a cybercrime." The alert platform was taken offline at 1:30 AM Saturday and remains deactivated with no timeline for return. ✓
Press quotes (1)
"Ainda não tenho como cravar quem fez o acesso. Mas tudo indica que não é uma pessoa do Sistema Nacional, nem alguém da Defesa Civil cadastrado pela Secretaria Nacional com acesso regular ao sistema. Isso nos leva a crer que foi um ataque hacker, um crime cibernético."
Ten false alerts were sent between 11:41 PM Friday (19th) and 1:23 AM Saturday (20th) using credentials from two Pará Civil Defense agents
Platform was taken offline and Federal Police opened preliminary investigation
Nine alerts sent via cell broadcast and one by SMS
Covered by only some sources, or where the accounts diverge.
Covered by only some sources (2)
Only SMS alert sent to Belo Horizonte with message "ATAQUEALIENIGENA,HUMANOSCHEGAMOSmisantropo"
Experts warn incident could break public trust in alert system and increase risks during real disasters
Conflicting versions (1)
Number of capitals affected by false alerts
-
How did the invaders obtain the credentials of the two Pará Civil Defense agents?
Why it's still unknown: Federal Police have not disclosed whether passwords were stolen through phishing, whether agents' computers were hacked, or whether there was internal facilitation. Secretary Wolnei Wolff only stated that the investigation is ongoing.
-
Why did the system allow Pará state credentials to send alerts to other federal units?
Why it's still unknown: The Ministry of Integration document mentions there was "indication that the agent managed to operate the platform without proper territorial restriction," but does not explain the technical failure that allowed geographic restriction bypass.
-
When will the Civil Defense alert platform return to operation?
Why it's still unknown: Secretary Wolnei Wolff stated that the Ministry of Integration is working on developing a new version, but said: "I could not affirm here exactly the day this version will be completed."
-
What was the motivation of those responsible for the false alerts?
Why it's still unknown: No source investigated the reason for messages containing terms like "misanthropy" and "alien attack." Federal Police investigation has not yet identified the perpetrators or their intentions.