Armed Forces of the Philippines

The Armed Forces of the Philippines (AFP) is the country's principal military organization tasked with defending the Republic of the Philippines against external threats and maintaining internal security. It comprises the Philippine Army, Philippine Navy, and Philippine Air Force, each responsible for land, maritime, and aerial operations respectively. The AFP conducts a range of activities that include territorial defense, counterinsurgency operations, disaster relief and humanitarian assistance, and participation in international peacekeeping missions under United Nations mandates. Its mission is to safeguard the nation's sovereignty, protect its citizens, and uphold the constitution. The organization operates under the authority of the civilian government and is directed by the President of the Philippines in his role as Commander‑in‑Chief. Training, doctrine, and equipment are continually updated to address evolving security challenges, ranging from conventional warfare to asymmetric threats such as terrorism and cyber‑enabled espionage. The AFP also engages in community outreach and civil‑military cooperation programs to build public trust and resilience. Its operational reach extends across the archipelago, covering Luzon, the Visayas, and Mindanao, as well as the country's exclusive economic zone. Through these functions, the AFP serves as a central pillar of national security and stability.

The Armed Forces of the Philippines is headquartered in the Philippines and is also known by several aliases, including the Philippine Military, Sandatahang Lakas ng Pilipinas, and the acronym AFP. Over recent years, the organization has encountered a series of cyber incidents that highlight its exposure to digital threats. In February 2025, the Philippine Army confirmed a cyberattack by the group Exodus Security, which claimed unauthorized access to systems and the potential compromise of roughly ten thousand records containing personal, military, medical, financial, and criminal history data of active and retired personnel. In May 2020, the Tropic Trooper cyberespionage group used USBferry malware to breach air‑gapped military networks via removable storage devices, aiming to exfiltrate defense and marine‑related intelligence. Earlier, in May 2017, the Vietnam‑based OceanLotus group conducted a sophisticated espionage campaign that targeted the AFP among other ASEAN entities, employing malicious Google Apps injections and custom backdoors to harvest information. Finally, in December 2016, the official website of the Philippine Military was defaced by an actor using the alias Shin0bi H4x0r, who replaced the homepage with taunting messages about security shortcomings. These episodes demonstrate that the AFP, while focused on conventional and internal security missions, also contends with persistent cyber‑threat actors seeking to exploit its information assets.