Cyber Incident Victim: Anonymous Philippines
Date:
Jan 2015
Location:
Philippines
Summary
Hackers affiliated with Anonymous Philippines defaced multiple Philippine government websites to protest perceived failures by the president in honoring 44 slain police commandos, demanding respect and justice for the officers. The group compromised approximately 20 sites, criticizing the leader's absence from memorial services and drawing parallels to prior cyber operations against government targets, including previous website defacements advocating for territorial sovereignty and online freedoms.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
On January 31, 2015, hacker collective Anonymous Philippines conducted a coordinated defacement of approximately 20 Philippine government websites. The attack occurred in response to President Benigno Aquino III's absence from arrival honors for 44 Philippine National Police-Special Action Force (PNP-SAF) officers killed during the Mamasapano clash in Maguindanao province on January 25. The group replaced website content with protest messages criticizing the President's failure to attend both the Villamor Air Base arrival ceremony and subsequent necrological services for the slain officers. Their statement demanded "RESPETO AT HUSTISYA" (Respect and Justice), accusing Aquino of disrespect toward the fallen personnel while emphasizing public outrage over his handling of the incident. Anonymous Philippines coordinated this action with another group called BloodSec International, which had previously hacked a freelance journalist's website, though the exact nature of their collaboration remained unspecified.

This incident marked at least the third major cyber protest by Anonymous Philippines against the Aquino administration since 2014. Previous operations included a March 2014 website defacement criticizing the government's approach to the Sabah territorial dispute and February 2014 attacks on government domains ostensibly defending online freedom of expression. The 2015 attack demonstrated recurring tensions between hacktivist groups and the administration regarding accountability for security force casualties. No specific technical details about the attack vectors, duration of downtime, or official remediation efforts were disclosed in available reports. The defacements temporarily disrupted public access to affected government services while amplifying political criticism through digital means, though no data breaches or permanent damage to infrastructure were documented in relation to this incident.
