Hackers are now selling login information for the Brazilian Federal Highway Police in exchange for a $200 bitcoin payment.

Reporting by Brazilian news outlet TecMundo said an anonymous source informed the publication about the scheme.

They said an offer for access was made via the Telegram messaging platform with further negotiation carried out through the end-to-end encrypted ProtonMail email service.

A source said the login information is acquired after leaked information comes out from banks, social networks, and ecommerce websites, because some Federal Highway Police employees use their official emails to make accounts on these types of external site.

Lots Of Power After Access

TecMundo wrote those who are able to log into the Police system have a lot of power. Infiltrators have the ability to look up vehicle data, find out details about fines, search through sensitive personal data, look at emails sent and received by police, and browse through a number of law enforcement systems.

According to the outlet’s source, it is also possible to just login and fine any vehicle in Brazil by entering a license plate, car information, and the name of the driver.

This is possible because there are no other security features, like two-step verification, before using the Highway Police platform to issue fines.

The current lack of additional security features also gives infiltrators the ability to fill out ‘Police Occurrence Reports’ to put people on law enforcement radar, and go through the process to release vehicles from police custody, according to TecMundo.

Security Is Of Upmost Importance

TecMundo reported they gave their information about the scheme to the Federal Highway Police. 

The law enforcement body said they would carry out an investigation because it “values transparency…in order to attend to its institutional mission to society.”

Reiterating the importance of good security practices, Emilio Simoni of PSafe said those with corporate emails should only be using them for activities directly related to their job.