Compromised credentials from the state of Pará civil defense were used to send false emergency alerts to millions of mobile phones [1].
The incident highlights a critical vulnerability in the national emergency broadcasting system, demonstrating how unauthorized access to administrative credentials can trigger widespread panic or confusion across multiple states.
The alerts were broadcast between the night of May 19 and the early hours of May 20, 2024 [2]. The messages reached users in several major urban centers, including São Paulo, Rio de Janeiro, Salvador, Belo Horizonte, Curitiba, and Rio Branco [1].
Instead of critical safety information, the notifications contained nonsensical and offensive text. The messages included terms such as “misantropia,” “ataque alienígena,” and “burros dms pprt” [1].
Authorities said that agents of the Defesa Civil of the state of Pará had their credentials misused to initiate the broadcasts [1]. While the system was used to target phones in diverse regions of Brazil, the source of the breach was tied to the Pará state agency.
Officials have not disclosed the specific motive behind the breach or identified the individuals responsible for the misuse of the credentials [1]. The breach allowed the perpetrators to bypass standard protocols and send push notifications directly to millions of devices [1].
This event underscores the risks associated with centralized alert systems. When credentials for a single regional agency are compromised, the impact can extend far beyond that agency's jurisdiction, affecting millions of citizens in distant cities.
“False emergency alerts were sent to millions of mobile phones.”
The breach reveals a significant security gap in Brazil's emergency alert infrastructure, where a compromise in one state's administrative credentials can be leveraged to broadcast messages nationwide. This vulnerability could be exploited for more malicious purposes than prank messages, such as coordinating disinformation during a real crisis or inducing mass panic in high-density urban areas.


