Hackers 'hit' Brazil's national alert system

An unprecedented cyberattack on Brazil's national civil defense alert system has raised serious concerns about the security of the country's critical digital infrastructure . Millions of mobile phones in at least seven states received fake "Extreme Alert" notifications from hackers, accompanied by the word " misantropi4 ", causing confusion and panic among citizens.

The incident is considered one of the most serious breaches of public warning systems in Latin America in recent years. The Ministry of Integration and Regional Development confirmed the attack and decided to take the entire platform offline at 1:30 a.m. Saturday. It has not yet been announced when it will be fully restored.

See also: Hackers use news sites and social media to spread malware

How the fake alerts spread

The first unauthorized notification was detected just before midnight on Friday in the state of Paraná. Within hours, the distinctive emergency sound, which overrides device mute and appears above any open app, was activated on mobile phones in São Paulo, Rio de Janeiro, Brasilia, Bahia, Pará, Mato Grosso do Sul and Acre.

Authorities confirmed that at least ten fake alerts in different parts of the country. Although no official number of affected devices has been given, local and international media estimate that around 30 million citizens received the misleading message.

The strange word "misantropi4" and the concern of the authorities

The devices displayed the message “Defesa Civil: misantropi4.” The word refers to the Portuguese “misantropia,” which means misanthropy or aversion to humanity, with the letter “a” replaced by the number “4,” a common practice in online slang.

See also: Outlook spying: Hackers were monitoring a stock exchange executive

Although the message did not contain any dangerous instructions or malware, the choice of the highest alert category caused huge uproar. These are alerts that are used exclusively in cases of immediate danger, such as floods, landslides or extreme weather events.

"This is a very serious incident, as the system is designed to protect human lives," said National Secretary for Protection and Civil Defense, Wolnei Wolff.

Cell Broadcast security under the microscope

Brazil's Cell Broadcast system is a relatively new technological infrastructure. Its use was approved in 2022 by the country's telecommunications regulator, piloted in 2024, and expanded to the entire territory only in October 2025.

This technology allows authorities to broadcast alerts to all devices within range of a mobile phone base station, without requiring phone numbers or prior user registration.

However, cybersecurity experts point out that several Cell Broadcast systems internationally have a critical drawback: they lack strong mechanisms for cryptographically verifying the origin of messages. Simply put, devices cannot always determine whether a notification actually comes from the competent authorities.

See also: WordPress: Hackers exploit Burst Statistics vulnerability

Critical infrastructure becomes a new target for cybercriminals

The incident in Brazil is the latest in a series of attacks that demonstrate that even critical systems can be compromised using relatively simple techniques. In recent months, incidents in other countries have shown how a combination of misconfigurations, outdated cryptography and inadequate controls can create dangerous security gaps.

The biggest threat, however, is not just the technical breach of an alarm system. It is the loss of public trust. If users start to treat the emergency sound as a hoax or even a false alarm, there is a risk that they will ignore a real message when a natural disaster is in progress. And in such cases, the consequences can prove to be much more serious than any cyberattack.