Office of International Affairs of Goiás, City Hall of São João da Boa Vista & Aquidauana Hacked by Backbone Squad

Over the course of the last 2 days, January 9th – 10th 2019, the Brasilian based hacking group known as “Backbone Squad” has announced a joint string of hacks and leaks effecting 5 cities/municipality’s and public universities across Brasil. Exposed in the attacks were the Office of International Affairs of the city of Goiás, the Study and Quality Research Group of São Carlos, City Halls of Aquidauana and São João da Boa Vista, as well as the Department of Chemistry at the Federal University of Minas Gerais (UFMG).

In leaks provided to the public, not only were hackers able to provide proof that they reached all of the website’s internal databases, but in many instances they also leaked the admin login credentials for members of the public to browse through the information for themselves.

Image may contain: text

In the first leak of the Office of International Affairs of Goiás, hackers indicated they were able to gain remote access to 4 site databases containing internal documentation, such as polls, login information, business proposals, staff birth dates and much more. To serve as proof, hackers also leaked the user login names and passwords of 100 registered account owners tied to the website.

Website: hxxp://gabinetecivil.goias.gov.br
Leak 1: https://ghostbin.com/paste/s7fje

In the second leak effecting the Study and Quality Research Group of São Carlos, hackers indicated they were able to gain access to 3 site databases containing different research studies/documentation and educational material. In the a posting through Ghostbin, hackers mirrored the tables of 45 file folders contained within the websites admin area.

Website: hxxp://gepeq.dep.ufscar.br
Leak 2: https://ghostbin.com/paste/pkkaa

In the third hack of Aquidauana’s City Hall, hackers were able to gain access to two site databases, exposing information related to the cities clients list, official town functions/events, the city’s official online news agency, as well as various photo files and user profiles. To serve as proof, the hackers also leaked the login username and password of 3 site administrators – granting the public access to the information.

Website: hxxp://aquidauana.ms.gov.br
Leak 3: https://ghostbin.com/paste/rjvqv

In the fourth hack of the City Hall of São João da Boa Vista, hackers revealed that they were able to gain access to two site databases containing information on the sites news letter, photo files, internal document storage on contact submission requests from the general public – in addition to much more. As proof, the hackers also released the login username and password of 4 website administrators.

Website: hxxp://saojoao.sp.gov.br
Leak 4: https://ghostbin.com/paste/8p9sh

In the fifth and final leak of the Department of Chemistry at the Federal University of Minas Gerais, hackers were able to gain access to 3 site databases containing some interesting information. For example, the results of different studies coordinated throughout the course of the 2016 Olympic summer games in Rio De Janerio, Brasil. Hackers were also able to uncover the email addresses, school ID’s and login user names and passwords of over 100 registered users of the department. Additionally, hackers also posted the login user name and password of 2 website administrators, granting public access to all of the departments file folders.

Website: hxxp://zeus.qui.ufmg.br
Leak 5: https://ghostbin.com/paste/4psja



Categories: Hacking News

Tags: , , , , , , , , , , ,

Leave a Reply

Your email address will not be published.

Do NOT follow this link or you will be banned from the site!
%d bloggers like this: