Cyber Threat Actor: MCA

The threat actor known as MCA and PHU DDOS Squad conducted disruptive operations targeting Philippine government infrastructure, collaborating with groups like Pinoy LulzSec and Elite Cyber Security under collective Anonymous-affiliated initiatives. Their sole documented alias is "MCA and PHU DDOS Squad," appearing alongside partner collectives in operational claims. The group exclusively targeted the Philippine Bureau of Customs during their August 2015 #OpCustoms campaign, focusing on civil disruption rather than financial theft or data exfiltration. Their objective centered on protesting customs policies affecting Overseas Filipino Workers (OFWs), explicitly citing grievances against Commissioner Alberto Lina's intensified inspection protocols for balikbayan boxes. Public statements framed the attacks as retaliation against perceived governmental hypocrisy in prioritizing OFW enforcement over large-scale smuggling operations.

The actor employed basic distributed denial-of-service (DDoS) techniques involving "multiple pings and packets" to degrade website availability, causing intermittent outages and slowed performance for the Bureau of Customs' online portal. No malware, advanced tooling, or persistent access methods were referenced. Operations demonstrated opportunistic coordination with ideologically aligned groups rather than formal organizational hierarchy. The #OpCustoms campaign represents their only publicly attributed operation, characterized by transient disruption timed with policy enforcement controversies. No criminal affiliations, state sponsorship, or recurring campaigns were evidenced in available reporting.