Cyber Threat Actor: PHU DDOS Squad

The threat actor known as the PHU DDOS Squad operates under several aliases that have appeared in public statements, including ~Pinoy LulzSec, ~Elite Cyber Security and ~MCA. The group is based in the Philippines and identifies itself as part of the broader Anonymous collective, aligning with other hacker collectives that share similar nomenclature and protest‑oriented messaging. Their public communications consistently reference a loose affiliation with these named factions rather than a formal hierarchical structure.

The PHU DDOS Squad’s observed activity focuses on disrupting online services of Philippine government institutions, specifically targeting the Bureau of Customs website. Their attacks are characterized as Distributed Denial of Service campaigns that flood the target with excessive pings and packets, causing temporary inaccessibility or degraded performance for users. The stated strategic objective of these actions is to protest government policies perceived as unfair to Overseas Filipino Workers, aiming to draw attention to the issue rather than to achieve financial gain or conduct espionage. This motivation is explicitly articulated in the group’s own messages, which frame the disruption as a symbolic act of solidarity with OFWs worldwide.

In terms of tactics, the actor relies on volumetric DDoS techniques that employ multiple concurrent connection attempts to overwhelm network resources, without reference to specific malware families, exploit kits, or sophisticated initial access vectors. The most notable publicly reported operation associated with the PHU DDOS Squad is #OpCustoms, launched in August 2015 against the Bureau of Customs, during which the group claimed responsibility for slowing or temporarily taking down the site. The operation concluded with the attackers issuing an open letter demanding policy changes, after which the targeted service reportedly returned to normal operation following the cessation of the flood traffic. This episode remains the primary documented example of the group’s capabilities and objectives.