EddieJayonCrypto
8 Jul 25
Hackers stole $100 million from Brazil's Central Bank by exploiting security credentials purchased from an insider at C&M, a software company connected to the bank's PIX payment system. The insider, C&M employee João Roque, allegedly sold his credentials to the hackers. Using these credentials, the ...
Hackers reportedly stole $100 million from the Central Bank of Brazil by exploiting security credentials purchased from an alleged insider. The cyberattack targeted Brazil’s PIX instant payment system, a popular platform for digital transactions.
The attackers gained access by infiltrating C&M, the software company that connects financial institutions to the central bank for PIX transactions. Authorities arrested C&M employee João Roque, who allegedly sold his credentials to the hackers after being recruited last year.
Using Roque’s credentials, the hackers executed fake PIX operations, stealing the massive sum in a single night from institutions within the C&M network. Police investigations suggest at least four other individuals were involved, and efforts to identify them continue.
Authorities have managed to block about half of the stolen funds and are working to freeze the remaining assets. C&M has stated it is cooperating fully with investigators and attributes the breach to unauthorized credential use rather than any structural flaws in their system.