Pinoy Anonymouz

Profile narrative

Pinoy Anonymouz, also known as Pinoy Grayhats, is a threat actor that has publicly identified itself as operating from the Philippines. The group’s known activity is limited to a single defacement incident in which it claimed responsibility for altering a university website. No further aliases, organizational structure, or geographic scope beyond the self‑stated Philippine origin have been documented in open sources.

The actor’s observed targeting has been confined to Philippine educational institutions, specifically the Ateneo Integrated Student Information System (AISIS) at Ateneo de Manila University. The strategic objective demonstrated in the Ateneo operation appears to be political protest rather than financial gain or espionage, as the defaced page carried explicit messages opposing pork barrel allocations, corruption, and political dynasties. This indicates an intent to disrupt normal service delivery while broadcasting a sociopolitical statement to the site’s student, faculty, and staff audience.

In the February 2 2014 incident, the group gained unauthorized access to the AISIS portal and replaced its content with the statement “HACKED BY PINOY ANONYMOUZ. NO TO PORK BARREL!!! NO TO CORRUPTION!!! NO TO POLITICAL DYNASTIES!!!”. The university’s security office told media outlets that it had not yet received formal incident reports, and the IT department was unavailable for comment, leaving the technical details of the intrusion unverified. No malware families, exploit kits, or specific initial access vectors were disclosed in the reporting, so the actor’s tooling style remains undefined beyond the use of website defacement.

Publicly available sources do not establish any connection between Pinoy Anonymouz and state‑sponsored entities, criminal consortia, or larger hacktivist collectives. Consequently, no attribution to a foreign government or organized crime network can be made. The Ateneo defacement stands as the sole publicly reported operation confidently linked to the group, and no additional campaigns, malware usage, or recurring patterns have been documented in the material provided.

Incidents

Attributed incidents are available to members.

Sources

Sources available to members: 2 sources.