New hacker attack targets FictorPay, a business services company

FictorPay offers financial services for businesses, such as accounts, loans, advance payments, and payment tools. According to one source, Brazil’s Central Bank observed unusual financial transactions through FictorPay on Sunday and alerted Celcoin, the company to which FictorPay is affiliated. Celcoin is linked to Pix, the Central Bank’s digital payment system, but FictorPay is not.

Sources following the case say that it was “a direct attack” on FictorPay, unlike other attacks occurred this year. In these other cases, the attacks were carried out through information technology service providers (ITSPs), which are the companies that connect financial and payment institutions, on the one hand, and BC’s systems, such as Pix itself, on the other.

According to the sources, no systems managed by the Central Bank were attacked.

In a statement, FictorPay said it was notified of “irregular activity in the technology environment of a service provider that serves several companies, including [our] company.” According to the fintech, “the incident is being investigated by the provider itself, with the support of information security specialists, and to date, there is no record of any impact on FictorPay’s own systems.”

Celcoin also released a statement saying that there was no invasion, attack, or compromise of its technology infrastructure or transactional environment. “Atypical activity was identified in a customer’s account, which was promptly detected by our monitoring systems. As soon as the behavior was noticed, we preventively blocked the transactions and immediately alerted the customer.”

“Analysis indicates that the origin of the incident lies with a white-label application solutions provider used by this customer and other companies in the market, impacting several BaaS and Core Banking players, with no connection to Celcoin,” it stated. The company says it is “supporting the customer in the investigation and recovery procedures.”