Cyber Incident Victim: Macau, People's Republic of China
Date:
Oct 2023
Location:
China
Summary
A Macau-based taxi operator experienced a cyber attack involving unauthorized dissemination of sensitive content through its in-vehicle systems, with hackers displaying messages referencing social issues in mainland China including youth unemployment and flood relief efforts. The compromised systems showed graphics attributed to 'Anonymous64,' prompting the company to publicly disavow any association with the material and report the incident to law enforcement as a national security threat.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
On October 1, 2023, coinciding with China's National Day celebrations, Macau Radio Taxi Services experienced a cyber attack targeting its operational systems. Hackers compromised the company's digital infrastructure and disseminated unauthorized content through in-vehicle displays across its taxi fleet. The intrusion resulted in the display of politically sensitive graphics addressing social issues in mainland China, accompanied by the visible tagline "Hacked by Anonymous64." The taxi operator confirmed the security breach through an official statement released via its WeChat account, characterizing the incident as an unlawful hacking event involving information threatening national security. The company emphasized it had no prior knowledge of or involvement in the attack, which disrupted normal service operations during a high-profile national holiday period.
Internal screens within affected taxis displayed content referencing youth unemployment statistics and flood relief efforts in mainland China—topics considered politically sensitive. Macau Radio Taxi Services immediately disavowed any association with the disseminated material and initiated incident response protocols by alerting law enforcement agencies. The company formally reported the breach to Macau police authorities, though specific technical details regarding the attack vector, duration of compromise, or total number of affected vehicles remain undisclosed. No customer data breaches or service interruptions beyond the unauthorized screen displays were explicitly acknowledged in the company's public communications. The incident marked a rare public case of physical transportation infrastructure being leveraged for politically motivated cyber activities within the region.