🚨 CRITICAL CYBERINTELLIGENCE ALERT: GOVERNMENT INFRASTRUCTURE COMPROMISE – GENERAL TREASURY OF THE REPUBLIC (CHILE) 🇨🇱🏛️🔐 A high-impact technical breach targeting the General Treasury of the Republic (TGR) has been detected. According to activity monitored on specialized Telegram channels, the threat actor "rutify" has compromised and distributed critical administrative access credentials. 🏢 Affected Entity: General Treasury of the Republic (TGR), Chile. 👤 Threat Actor: rutify. 🛠️ Attack Vector: The data was reportedly initially extracted from an Infostealer log (malware designed for credential theft). 🔐 Credential Status: It is reported that the threat actor changed the password following initial access to ensure persistence. 🔑 Compromised Asset: API Design and Management Dashboard. 📅 Date of Detection: April 30, 2026. 📊 Impact Analysis (Public Sector) Access to the TGR's API management platform poses systemic risks: Revenue Collection Area: The user account is associated with external revenue collection processes, thereby compromising the integrity of the State's payment processing services. API Control: As this is a management platform, the attacker could gain visibility into sensitive endpoints, technical documentation, and authentication methods for national financial services. 🛡️ Immediate Response Recommendations 🔒 Recovery and Lockdown: The TGR is urged to perform a forced password reset on the affected account and audit any changes made to the permissions of the managed APIs. 👁️ Mandatory MFA: Implement Multi-Factor Authentication (MFA) for all external access points to render passwords obtained via malware useless. Monitor: analyzer.vecert.io #CyberSecurity #Chile #TGR #Infostealer #TelegramLeak #APICompromise #CSIRT #VECERT #InfoSec #SinVerificador 🇨🇱🛡️⚠️🚨🔐