Jan 13, 2025, 07:36 AM
Article was written 8th of January, 2025.
The country is investigating the hacking of government systems.
Chinese government hackers have breached the executive branch of the Philippine government and stolen sensitive data. This was reported by sources familiar with the situation. According to insiders, the attack targeted multiple Philippine institutions, including a network of hospitals and government agencies involved in coastal defense.
The breach, revealed in 2023, was re-discovered in August 2024. The stolen data includes military documents related to a territorial dispute between China and the Philippines in the South China Sea. Hackers used the stolen credentials to install malware and remove traces of their activities.
The Philippine Department of Information and Communication confirmed that the attacks are “persistent” and “consistent with the actions of APT groups.” However, the agency declined to confirm the data leak. The Philippines' allies - the US, Australia, the UK and Japan - are providing technical and information support, as well as defense equipment. Additionally, private IS companies are involved in the investigation. The attack on the president's office was part of a broader spying campaign linked to the APT41 group. The operation lasted from early 2023 through June 2024 and involved data theft.
China denies involvement, saying it opposes cyberattacks as a matter of principle and condemning politically motivated accusations. Nevertheless, China has been repeatedly accused of similar actions in the past. For example, in 2023, Chinese hackers attacked an unnamed Philippine agency, and in February 2024, an attack on the website of the Overseas Filipino Workers Administration was foiled.
In May, a SentinelOne study found that ideologically motivated hacker groups are increasingly trying to destabilize the Philippines through cyberattacks. The observations are supported by another cybersecurity company, Resecurity. According to its report, in the first quarter of 2023, the number of cyber attacks against the Philippines soared by 325% compared to the previous period. At the same time, hacktivist groups and disinformation campaigns nearly tripled.
The Philippines has been on the front lines of a territorial standoff with China over its claims in the South China Sea. As the closest U.S. ally, the island nation finds itself at the epicenter of this regional conflict.
The country is investigating the hacking of government systems.
Chinese government hackers have breached the executive branch of the Philippine government and stolen sensitive data. This was reported by sources familiar with the situation. According to insiders, the attack targeted multiple Philippine institutions, including a network of hospitals and government agencies involved in coastal defense.
The breach, revealed in 2023, was re-discovered in August 2024. The stolen data includes military documents related to a territorial dispute between China and the Philippines in the South China Sea. Hackers used the stolen credentials to install malware and remove traces of their activities.
The Philippine Department of Information and Communication confirmed that the attacks are “persistent” and “consistent with the actions of APT groups.” However, the agency declined to confirm the data leak. The Philippines' allies - the US, Australia, the UK and Japan - are providing technical and information support, as well as defense equipment. Additionally, private IS companies are involved in the investigation. The attack on the president's office was part of a broader spying campaign linked to the APT41 group. The operation lasted from early 2023 through June 2024 and involved data theft.
China denies involvement, saying it opposes cyberattacks as a matter of principle and condemning politically motivated accusations. Nevertheless, China has been repeatedly accused of similar actions in the past. For example, in 2023, Chinese hackers attacked an unnamed Philippine agency, and in February 2024, an attack on the website of the Overseas Filipino Workers Administration was foiled.
In May, a SentinelOne study found that ideologically motivated hacker groups are increasingly trying to destabilize the Philippines through cyberattacks. The observations are supported by another cybersecurity company, Resecurity. According to its report, in the first quarter of 2023, the number of cyber attacks against the Philippines soared by 325% compared to the previous period. At the same time, hacktivist groups and disinformation campaigns nearly tripled.
The Philippines has been on the front lines of a territorial standoff with China over its claims in the South China Sea. As the closest U.S. ally, the island nation finds itself at the epicenter of this regional conflict.
