💣 Chile🇨🇱: cybercriminals breached the Monnet Pagos en Línea payment platform and stole USD 1.070 million

💣 Chile🇨🇱: cybercriminals breached the Monnet Pagos en Línea payment platform and stole USD 1.070 million

The attack, carried out between June 1 and June 10, resulted in 214 unauthorized transactions that were never approved by the payment operator.

🤔 Fraud: the incident began when the attackers used the technical credentials of one of the merchants operating on the platform (the lawsuit does not identify the company), making the transactions appear legitimate. After the merchant reported the issue, Monnet staff determined that the connections originated from unauthorized IP addresses and that, in several cases, the taxpayer identification numbers (RUT) matched the recipients' bank accounts but did not match their names.

🤔 Change in strategy: the attackers then focused on the platform's back office, specifically the module used for bulk payments. At this stage, Monnet detected automated authentication attempts, typical of credential brute-force attacks, during which between 11,000 and 15,000 different IP addresses were used within a short period.

🤔 Third attempt: on June 17, the attackers launched another attempt. This time they generated 110 requests for 1 pesoeach using an account named “test user”. However, the company detected and blocked the transactions before they could be processed.

🤔 Recipients: most of the fraudulent transfers were directed to accounts associated with the payment platforms Falabella (102 transfers) and Mercado Pago (91 transfers).

🤔 Financial impact: the lawsuit states that the transferred funds were the company's own resources intended for payment processing, meaning each fraudulent transfer directly reduced Monnet's equity.

🤔 Company profile❓: Monnet Pagos en Línea has been operating in Chile for approximately one year, providing electronic payment processing services across several Latin American countries. In practice, it operates as a subsidiary of Peru-based Monnet Payments🇵🇪.

🤔 Legal proceedings: the complaint filed by Monnet Pagos en Línea was accepted by the Santiago Guarantee Courtand has since been referred to the Public Prosecutor's Office, which will lead the criminal investigation.

#news #Chile

🌎 payplanet.com verified partner for LatAm, India🇮🇳 Turkey🇹🇷 @pay_planet