Someone is auctioning on several restricted underground forums a database containing personal information of 92 million Brazilian citizens. The threat actor, registered as X4Crow, is also advertising a search service that allows retrieving detailed information on Brazilian citizens.
The records are arranged per province, they include names, dates of birth, and taxpayer ID (CPF – Cadastro de Pessoas Físicas), taxpayer details about legal entities, or the CNPJ (Cadastro Nacional
The initial price to participate in the auction is $15,000, participants can raise the price of 110 each time.
“A post on one of the forums seen by
At the time of writing, it seems that the seller has not received any bid.
X4Crow also advertises a search service that allows retrieving detailed information on Brazilians (i.e. Email address, profession, education level, possible relatives, neighbors, license plates, vehicle, ID card, driver’s license) simply providing a full name, taxpayer ID, or phone number.
“There is no guarantee that all the details will be retrieved for all
Querying the service to retrieve data on a specific company and its corporate structure could cost up to $150.
According to BleepingComputer, X4Crow is a reliable actor in cybercrime underground even if it isn’t operating for a long time.