Renato Santos

🚨 CRITICAL CYBERINTEL ALERT: MASSIVE E-COMMERCE DATA LEAK – BARATO.COM.BR 🇧🇷🛒💸🔓 A massive data breach has been detected affecting the Brazilian coupon and deals platform, Barato.com.br. Threat actor "Sorb" has put up for sale a database containing extremely sensitive personal and financial information belonging to over half a million users. 🏢 Affected Entity: Barato.com.br (Brazil). 👤 Threat Actor: Sorb. 📂 Leak Volume: 629,000 total users. 📅 Detection Date: April 28, 2026. 📊 Breach Scope (PII and Payment Data) The leaked dataset is alarming due to the depth of the captured information, which includes credit card data linked to tax identities: Full Identity: 629,000 unique email addresses and 496,000 CPF numbers (Brazilian tax IDs). Financial Payment Data: Credit card holder names, cardholder CPF numbers, cardholder phone numbers, and full billing details. Account Security: Passwords encrypted using MD5 with a salt, which enables offline decryption attempts. Additional Personal Data: Full names, phone numbers (271,000), dates of birth (DOB), and IP addresses. 🛡️ Immediate Response Recommendations 🔒 Password Change: All Barato.com.br users are urged to change their credentials and—critically—to do the same on any other site where they may have reused the same password. 🔑 Credit Card Monitoring: Immediately review bank and credit card statements, and consider placing a preventive block on any cards that have been used on this platform. Monitor: analyzer.vecert.io #CyberSecurity #Brazil #Cheap #DataBreach #LGPD #CPF #CreditCardFraud #Ecommerce #VECERT #InfoSec 🇧🇷🛡️⚠️🚨🛒

🚨 CRITICAL FINANCIAL SECURITY ALERT: ALLEGED TOTAL COMPROMISE – CREEDX / MONSTERGATEWAY BRAZIL 🇧🇷💳🔒 A massive breach and total compromise of the infrastructure belonging to Creedx Finance LTDA (MonsterGateway)—a white-label payment gateway in Brazil that processes transactions via PIX, Boleto, and Credit Card—has been detected. Threat actor "ka1do" has demonstrated absolute control over the company's Supabase CRM, impacting over 30 client companies. 🏢 Affected Entities: Creedx Finance LTDA (creedx.com.br / monstergateway.com) and its clients (TriboPay, IronPay, InvictusPay, Frendz, among others). 👤 Threat Actor: ka1do. 📂 Technical Scope: Total Control Takeover (Supabase): Due to a lack of Row Level Security (RLS). 43,000+ Exfiltrated Leads: Data containing full PII (Name, Email, WhatsApp, CPF). 27 Administrative Backdoors: Accounts created using the universal password "MgwIntegr2026X". API Key Exposure: Integration keys for Pagar.me, SafePix, and other providers. 📊 Critical Vulnerability Analysis The attacker has published technical details exposing gross negligence in system security: Webhook Bypass: The ability to mark transactions as PAID without authentication, enabling direct fraud and the delivery of products/services without actual payment. Insecure RPC Functions: Over 80 functions lacking permission controls. Insecure CORS: Wildcard configuration allowing credentials on production APIs. Monitor: analyzer.vecert.io #CyberSecurity #Brazil #Creedx #MonsterGateway #DataBreach #FinTech #PIX #Supabase #PII #VECERT #InfoSec 🇧🇷🛡️⚠️🚨💳

Nova carteira de identidade chega a 51,3 milhões de documentos. Piauí lidera com 60% dlvr.it/TSFYtj