14 DAY TRIAL // Hacktivist group Anonymous has kicked off a set of cyber attacks targeting various government organizations in Brazil, as a form of protest against hosting the 2014 World Cup event in detriment of taking care of their own citizens.
Until now, the operation dubbed #OpWorldCup has already made some victims, as the systems of Globo TV Brasil, of the Brazilian government, Cemig Telecommunications and the Regional Electoral Court of the Amazon have been breached and data has been exfiltrated. Data is available on several online clipboard services, Pastebin being among them.
In the file dump text for Globo TV Brasil, a message seems to inform that the data has been obtained via social engineering tactics and consists of IP addresses and over 150 names and email addresses. The original text in Portuguese reads:
“Apenas uma engenharia social que fizemos no site da globo onde obtem informações dos possiveis funcionarios que se responsavéis pelo site www.globo.com, essas informações obtem Ip, Endereços, Emails entre outros ... Não é uma coisa que vocês esperariam mas é um bom adianto!”
Information pulled from the systems of other organizations seems to also have been retrieved and, apart from names and email addresses, it consists of hashed passwords and telephone numbers.
According to a more recent post on Pastebin, the group announced that these breaches have been just “a small demonstration” of the leaks they managed in 4 days. The post also makes available some information that has apparently been stolen.
The group says that they took 450 email addresses and passwords of employees of the Brazilian government, 3,4000 emails, full names and telephone numbers from Eletronorte (Centrais Elétricas do Norte do Brasil S.A), a subsidiary of the Brazilian power utility Eletrobrás.
Furthermore, a picture of the administration panel of the police portal is included in the Pastebin post.
One of the most recent breaches has been announced today on Twitter under the @OpGreenRights, informing that the website for the Ministry of the Environment has also been targeted, and at the moment of writing, the website appears to be down.
A full dump of the data extracted has been made public and contains login details, email passwords and phone numbers.
Not all the details stolen by the hacktivist group are currently publicly available, as in some cases the information has been taken down.
The group does not plan to stop the attacks until the 2014 World Cup competition reaches an end and the activity may increase in intensity and complexity.
In a statement made last week, Anonymous said that their actions were meant to persuade the Government of Brazil to “put an immediate end to corruption and stop the use of force and violence against peaceful demonstrators. We cannot stand idly while these injustices are being done. Know that we stand together and united to fight against this oppression.”