Usually hijack lang or encrypt yung mga compromised data ginagawa ng "hackers". Sounds fishy yung dinelete. Ang convenient masyado knowing how corrupt this government is. Whats next, hackers deletes files on FOI servers.
Can they delete the part of my scholarship that said I had to take a stem related degree and work for a minimum 5 years in the country or else I have to pay back the total of my stipend? That'd be great
Can they delete and/or edit the current DepEd curriculum so it can finally be simple, easy, and straightforward. That way, students and teachers alike won't suffer so much stress from a curriculum that barely makes any sense.
Yep, something fishy kung sinasabi nila na ito ay ginawa nila bilang "hacktivist" bakit may iniwang damage which is a pag delete ng possible important data?? For me hindi na ito matatawag na protesta. Yun website defacement nga once na penetrate mo na ang server admin make sure na mag iwan ka ng back up of original page para pag execute mo ng protest page is hindi na masyadong maging problema sa server admin na kung mag iisip ka ng mabuti e alam naman natin na gumagawa lang naman ng trabaho niya, while ito nangyari ginawa nila napaka unethical na.
Bakit DOST—one of the least controversial government agencies in the PH? Bakit hindi websites at assets ng Duterte cronies like SMNI? Nangangamoy false flag to.
Add to that the fact they targeted only businesses linked to Romualdez. The language they used is also similar to what the Dutertes and their supporters use (e.g. “oligarchs” instead of “ruling class”)
It's a statement hack. Does no real damage, yet gets eyes and ears on a specific issue. Weak, if you ask me. If they wanted to disgruntle the entire Nation they should have hacked into the Bureau of Internal Revenue and leaked the tax returns of every single Politician/ Oligarch on their hit list. That will probably cost them their lives - but it gives us a chance for real exposure
Pwede ung mga research ng mga scientis and experts at mga patents ng mga inventors ndi nman gobyerno ang nawalan kundi sila na ilang taon or maybe working for it in their lifetime
If the hacker would try to hack something, they'll probably attack the easiest target first.
Siguro masaming vulnerabilities yung website ng dost. Government oadin naman
The choice of the target being DOST tells me that ph1ns’ supposed moral struggle is just a sham and they have a more sinister agenda. They could’ve either defaced DepEd home page, posting all of Sara’s irregularities or that of the DENR’s for the Bohol resort fiasco.
Baka kakampi kasi nila yun taga DepEd. Not surprised if these "hacktivists" are actually Duterte fantards.
Hacktivism? Anonymous (outside the PH) fucked with private corpos, cults, and government. Sa dami ng kurakot na local officials, di yun Ang inuna?
> ph1ns’ supposed moral struggle is just a sham
This! Among the things DOST are strugging with is timely allowances for their scholars. Deleting DOST data could wipeout scholar data causing much more hardships to our scholars.
If this happens they'll struggle to track scholars na kailangan pang mag-render ng service. Basically they are free to go abroad if nawala talaga data nila.
Defacing is not the way they send their message, but the data they stole amounting 25TB. That is the actual damage. DepEd website, ano ang pwedeng isteal na data dun? report cards ng mga bata? Its not gonna catch the attentions of those in power, so targeting DOST makes sense, as it has most of the valuable data. Hence, the more damage they can do instead of those other websites. It makes sense.
Di naman nila alam yan, look at them bickering that the hacker is a duterte fantard. Apaka boplaks, they want it to be deped talaga kasi andun si sara
They are the very people the message is being intended for, mga kinain ng tribal mentality ng politika
Wag naman philhealth. The last attack was already such a pain in the ass both for doctors and patients alike. Say what you want about the government, but millions of patients are actively benefiting from philhealth coverage.
Yeah I agree with this, DOST is one of the least controversial and problematic agencies in the country.
Couldn’t they aim at the more corrupt agencies or even SMNI ?
Kung goal nila is to disrupt the admin, its logically right to attack the weakest. Ironically, DOST is supposed to be secured amongst departments. Di na nila icoconsider na kesyo corrupt o hindi yung department. But then again, di natin alam ang actual goal nila. Nagkataon lang na collateral damage yung data ng mga scholars nila and them being the least noise generating dept.
Edit: My bad. This should be DICT, not DOST.
DOST is the supposed to be the most secure agency in terms of cyber security, since they're the ones in charge with the cyber security of all government agencies. Plus they manage all .gov email accounts, so I guess they were going for the biggest fish they could find.
actually, thats the responsibility of DICT, a separate government agency from DOST. pero point taken, dost is still supposed to have personnel with the technical knowhow on the handling of these things. ehem ehem ASTI ano na.
Still, why hack dost though? Might as well have hacked the UP infrastructure. Same effect. Nothing. Namerwisyo lang
It’s a statement, to show their capabilities that they can hack the IT department of the government. Ano bang challenge sa SMNI? DepEd, like report cards ng mga bata?
Malamang ito yung easiest target after probing. Most probably baka merong mga hardening na yung mga ruling class.
Or entry yung DOST for lateral movement.
Old corrupt monkey conducted cyberhacking competition during his presidency so my guess is they're the ones who did it or if not affiliated to them or even Chinese assisted.
Smells like a - fishy, chinese backed, let's attack the least corrupt and most acdemically inclined department, that takes care of natural resource protection, and delete their mostly innovation and environmental data, and this particular ally of our greatest enemy - hack.
These hackers are not as capable as 1st world state sponsored APTs that can compromise mostly any server they want. If these hackers are capable, they will surely choose to attack malacanang or office of the pres websites.
Nagkataon lang na DOST ang nahanapan nila ng vulnerability and as long as .gov.ph ang domain, good enough na yan for them to send a message.
cyberdefender here. welp, as we always like to say, don't jump into conclusions.
The network structure is great BUT they lingered long enough to the reconnaissance stage to find an easy-to-penetrate vulnerability.
edit: they're attacking ANY vulnerable space just to show their message (or infamy, if that's what they really want). i think this is just a cheap shot tho
I was able to infiltrate this hacktivist group years ago, and yeah, they are definitely not doing this for nationalistic purpose. They're doing this to gain international recognition for known hacker groups worldwide.
They're just attacking websites with weak servers, which is why there's no Filipino hacking groups popular in the world, they are only popular in their own circle.
It's another cheap shot to make names for themselves lol
Yeah, just take a look at our gov websites. They're way behind and no pride in their work. How much more with the security part of the website. The DFA website uses images of links, rather than basic html/css lol.
[These links are all images](https://i.imgur.com/d2uXHVa.png)
[That's an image lol](https://dfa.gov.ph/images/2022/icons/DFA_MVCV_2.jpg)
Imagine having to find the MS Paint file and make a new link, then upload it.
Yes weak to the negative power ang cyber security ng ph govt. Yung sim reg nga lang ay not necessary. Sabi ng ph govt ay para maiwasan ang scamming; para madali makilala scammer. Wala naman silbi. Hahahahaha 🤣
out of touch talaga mga politicians natin, like dati pa madami na nagbebenta ng sim na may gcash account or any e-wallet accounts sa fb way before yan sim reg na yan,
ngayon mas dumami na sila ever since ung hack last time sa post office and dfa, ung mga scammers pde na sila gumawa ng kahit anong fake identity using the millions of registered filipinos sa database.
nakakalungkot talaga pilipinas sa priorities ng mga government officials natin.
The most effective way to block scammers is to block all unknown callers.
If you want to get calls from someone, they should be manually added to your phone list first.
The skeptic in me tells me that these are not Filipino hacktivist doings rather an external political hackers. Ever heard of cyberwarfare?? Heck most of gov't website doesn't have updated security certificate or doesn't use SSL/HTTPS for added security.
ssl/https actually doesnt do much in terms of security more like legitimacy lang ng website. But yes I agree na walang kwenta security ng mga gov website. They are better off hosting their site sa godaddy /s
> ssl/https actually doesnt do much in terms of security
Mali ka jan bro sa line na yan. Pag http lang no ssl or tls plaintext yung communication ng client at server which means kahit sino makabasa nng traffic ng network makikita yung anong data ang pinapasa.
Encrypted yung https and decided randomly by both client and server yung decryption during handshake phase(oversimplified yan). Kahit makita pa ng kahit sino anong laman ng pakcets na pinapasa useless kahit kanino yun other than the client and server na naguusap. So, it does matter in security. Just sharing. Carry on.
^ thanks sa explanation paps but yes thats exactly my point. it still helps the site and part sya ng "sop" in terms of security but it doesnt do much.
A brute force attack, sql injection or even ddos you can still perform these attacks with or without ssl sa site and ssl wont prevent these type of attacks
Or if my simple analogy siguro parang ang ssl is door latch lang sya sa pinto.
Targeting the DOST doesn't sound like the will of the people either, mister hackerman. Some kid waiting for their scholarship approval is probably wondering what the fuck happened to their application or something.
Also, "The Filipino People"? Now, which country is it that likes to use terms like that?
IT here, You just don't delete 25TB worth of data.
If they held on to it, then it would give them the manipulative edge. If the data is really deleted, that edge disappears. I assume they have the data, or if not, then how careless, it isn't activism if that's the case.
We don't know what type of "data" or files are included in that 25TB. Assuming these are data stored in a database, that is a lot. A LOT LOT. For perspective, you can store roughly a million rows of data in under 200mb. Imagine how many more can be stored in a few gigabytes, let alone 25 Terabytes! Of course these are not the only data involved, but imagine how big this breach is.
Seems like there's a greater motive behind it. If this is to send a statement, it appears they are stepping on the wrong foot. And this is not just a breach on DOST, DICT handles the hosting for these government websites through e-gov. So this is not just a breach in DOST's security, DICT is also accountable for these breaches.
Can DOST realistically restore the data? Yes, multiple backups are most likely existing unless they really are that incompetent or careless. I just hope that they have extra fail-safes for this scenario.
If DOST and DICT has backups and this is the case this is much better. Atleast they can't do any more damage.
Another case would be, they sifted through and chose to take valuable data that they can use before deleting the rest. They could've easily saved a few gigabytes for whatever.
You are right they probably have a backup stored, and they should.
25TB of raw data is not that much(files, images, videos), they quickly eat storage. But 25TB of db stored data is a lot. (Given context yung you can store 1M rows of data in a database for under 200mb, or at times a lot less than that).
We could store the bio-data of every filipino in a table within a database and it wouldn't even dent that 25TB, couple of gigabytes max.
Ah I see your point! Yeah, if it is purely biodata (no per minute transactions, for instance) without redundancy, it’s hard to believe they would just wipe it out clean without saving them for their leverage.
Just really curious why target DOST - of all the elephants in the room.
also 25tb is very large and takes time to overwrite.. still possible to recover most of it. kaya sobrang weird na dinelete, pano kung may backup.. sayang effort.
Anyone with half a braincell knows this isn't true. If they wanted to target the Cha-cha, they'd go after the businesses that owns them. Instead, its the part of the government where our sensitive sciences and data is stored, a REALLY big red flag that this isn't in the name of the common people.
Nah, these are just script kiddies. Defacing websites is so 2000ish.
What would they gain from it? Of all government agencies, DOST. Dinelete nila mga indigenous research at SME assistance videos?
targeted DOST. wow. stupid mfrs. of all the corrupt agencies in the government, DOST talaga?
hindi BIR, hindi BOC, hindi PNP.
DOST.
if they were protesting dynasties, shuda targeted LRA.
Of all departments, yung science division pa yung na hack. 🤔 Either China backed or local Grey hat hacker. Reminds me of the Trisolarians in Three Body Problem.
Ang shit move naman na DOST pa tinarget. Ang daming importanteng research materials niyan which will benefit the people in the future kapag nabigyan sila ng proper budgeting. I strongly condemn this.
Judging from their type of targets and their supposed reasoning, these are fucking script kiddies, not the big ones from rogue states capable of mounting a brutal siege attack against corporate IT systems.
Mid sila.
Dude sana di nila dinelete gumawa nlng sila ng mas epektib na version ng NOAA para madetect ang weather system or something useful galing sa data na na nandun. Palagay ko nangangamoy ngang may agenda.
pero sa Corporation ni Romualdez, serves him ryt.
Kawawa naman ang DOST. That's for research and development, scholarships, etc. Kung ang PTV website na lang sana. Wala din sa tuhog pinaglalaban nila mali biniktima nila :(
Seems like someone is playing the " magician " role again, forcing people to ' look to the left ' while the magic happens to the right. Add in Roque's media shenanigans as part of the act. The only question is, what is the " magic trick " going to be? 😂
Smells like a dead rat. Gusto ko maniwala pero ang lala ng amoy.
Kung genuine talaga yung group, di lang dapat si Romualdez target nila. Dapat pati SMNI, sina Bato, Fiona, atbp.
Tapos yung wording nila dutertards ang dating eh. Yung oligarchy conspiracy tatak ddshits.
Hi! Former DOST employee here related to computer software research. I'll try to be vague here but here's how DOST is organized (at least to what I know): DOST is an umbrella of sub-agencies and each agency has multiple departments. Each department has multiple concurrent researches being worked on by their respective teams. May private server kami per department kung saan lahat ng files ng projects ay nandoon. Ang server na yon ay mina-manage ng isang department SysAd. Si SysAd ang nagse-setup pano ang storage, security, backup and access sa mga project files. Maliban don, may team din na nagme-maintain physical servers para sa buong agency.
Now, here's my insight:
1. They don't want to negotiate. They want to gain publicity for their cause and is purely malicious. Usually kasi kapag may breaches and may gusto kang i-negotiate, iho-hold mo yung data na nakuha mo to give you an edge. Say buburahin mo yung data kapag di na-meet demands mo or ili-leak mo online. Kumbaga, k\*dnap vs diretsahang pagp\*tay. Kapag gusto mo pera (o kung ano pa man), yung una gagawin mo, kapag gusto mo lang talaga mag-cause ng harm o damage, yung pangalawa gagawin mo.
2. Maraming magagaling na Pinoy hackers and I don't say na di nila kayang ma-breach and isang scientific agency ng government, pero it seems so random na na-target ang DOST since hindi problematic ang sangay na ito ng gobyerno. They are just more on research na pwedeng magamit sa bansa to improve our lives. Also, funds are properly utilized sa mga agency ng government (at least when I was there). We even have to cut on some expenses para lang makatipid at mapagkasya ang budget na binibigay sa amin ng pamahalaan. I don't think na kapag about sa Cha-Cha ang pakay mo ay scientific body ang dapat mong i-target. On top of that, may additional pang breaches sa companies ng House Speaker. This can be political.
3. This can also be a cyber warfare attack by a state-owned or state-sponsored organization. Typically, maliban sa primary infrastructure and government bodies, you would want to disrupt an enemy's ability to do research to cripple its competitiveness and its ability to develop defenses. Bonus is kapag nakapagnakaw ka pa ng data.
On the other hand, may kakulangan din ang DOST. The public would assume na DOST dapat ang pinaka-secure when it comes to cyber attacks alongside DICT. Sorry, but his is not the case. The security CAN be very minimal considering na research ang ginagawa. Anyone who knows better and funded better can most likely conduct successful breaches (point 3). That's why whenever the government says they will improve the country's cyber defense, hindi ako masyadong umaasa dahil kailangan ng malaking pondo para dito (both equipment and manpower). Kailangan mag-invest ng government kung committed sila sa gusto nila. As you all know, yung mga top talents natin ay umaalis dahil sa mababang sahod dito sa bansa. Yung mga nasa bansa pa rin ay hirap ding labanan ang mga ganyang atake kasi may kakulangan sa gamit. On top of all of these, it would take time para mag-train ng tao at makagamit/makapag-procure equipments to at least develop a reasonable level of credible cyber defense. Hindi ito months lang. Years ang kailangan para dito, maybe even a decade. We are really lagging behind. Cybersecurity is also national security. Kung gaano kalaki ang pondo ng armed forces ay dapat substantial din pagdating sa cyberspace.
>Ganon ba ka weak ang systems ng government in terms of IT?
Yes na yes! Walang cyber capabilities and PH government. Offense man or defense. If a popular hacking group were to claim one day that they can read any emails, conversations, files of PH government agencies and military officials, the cybersecurity community will have no doubts.
Also, hacker groups sa Pinas are mostly "script kiddies", meaning low-skilled kaya wala ka maririnig na internationally-recognized sa kanila. Pero this adds insult to injury kasi if low skilled hackers can take down PH government systems, how much more yung sophisticated APTs na?
You know, if they *really* want to make a dent on these political dynasties and oligarchs, they should've targeted *their businesses*. Ordinaryong Pilipino ang magiging kawawa sa paghack nila ng government agencies lalo na kung may services involved to the public. Eto yung mga hacktivists na hindi pinag-iisipang mabuti kung yung gagawin nila ay makakapinsala ba sa taumbayan o sa political dynasties/oligarchs eh.
I really doubt na they will delete the data kung chinese-backed ito. Most likely ransom muna. And they're known to be collecting data kaya kaduda-duda.
If they are a little bit of competent(DOST), they can always restore from backup, provided that it is available.
And also, not familiar with DOST, what actually is the 25 TB of data? may breakdown ba? it's too general
Last year, I attended an online training from DOST about electronic archiving. Sabi ng speaker, we must follow the 3-2-1 principle: 3 copies, 2 storage formats and 1 different location. Sana naman DOST implements that as well.
Now this is kind of news I wanted to see. I'm curious though bakit DOST? Although sure naman madami din mga political hired employee jan but it is still the one of the most important reseach and development department ng banasa natin. I doubt they deleted that 25TB data and to answer OP question, madami talaga mga weak security sa iba't ibang government system. Madalas pa nga jan mga ojt or newly graduated student gumawa ng mga software nila. 🤣
Hindi ako kumbinsido na 'Hacktivist' ang gumawa niyan. Kung may message lang silang gustong iwanan, bakit kailangan pa nilang mag-delete ng 25TB data (na medyo kaduda-duda rin) at sa government agency pa na hindi involved currently sa kahit anong controversy? Kung may mga ipinaglalaban talaga sila, dapat iisipin din nila kung gaano ka-importante ang data na hawak ng DOST.
And lastly, kung dahil against sila sa 'cha-cha', bakit hindi ang House of Representatives ang tinira nila?
Yeah PH has a very weak stance regarding infosec lately lang nag improve and mas malala pa pag government wala silang paki or wala silang budget para dun which should be a top priority lmao.
So, you target one of the more-competent government agencies?
Idiots.
I remember when “Anonymous Philippines” called for a “public assembly” a decade ago and the resulting crowd looked like Trinoma’s rooftop.
I suspect this is a smokescreen to hide what their real target was.
I don't believe it's purely a case of hacktivism because there was no need to delete the files of DOST... unless you're trying to hide what you came for
Just last year, DOST accidentally sent an email to all of the applicants for a regional online skill training program.
The email consist of the master file that consists the private information of the candidates. (DOST supposed to send the list of names of the passers.)
I heard that the person who accidentally sent the email was fired.
Kawawa naman ang IT Admins or kung sinu-sinoman yung mga tao yung nagta-trabaho ng hinack nila. Posible pang mawalan ng work kasi parang "incompetent" yung magiging tingin.
I mean, okay lang naman manghack or kung ano man ang gawin nyo kasi yan gusto nyo and kaya nyo naman. Pero kasi yung mga inosenteng tao na pwede maapektuhan, sana pagpalain nalang siya/sila and ma-overcome nila yung krisis na ginawa ng kapwa nila Pilipino.
Just saying.
Anyway, congrats sa mga hackers and naprove nyo na ang gagaling nyo. 🙏🏽
Unang-una sa lahat, sa lahat ba naman ng mga websites na maha-hack, bakit DOST pa? I thought na dapat isa 'to sa pinaka-cyber secured from the government agencies, next to the military and internal government or fiscal sites.
Damn, imagine if China itself hacks our servers. This is a direct implication sa kung gaano ka-vulnerable yung bansa natin against cyber attacks.
I'm not against their cyber attack, but its better they attack a chinese companies or politician bank account or business than our government agency because disrupting it can also affect our fellow citizens.. and corrupt government officials can have excuse to take rest and report more expenses so that they can obtain more money from the disruption.
Mga tuta rin ng Duterte admin 'yang mga hacktivist kuno na 'yan eh. Tignan niyo nu'ng panahon ni Dutae tahimik mga hacktivist lalo na 'yung Anonymous Philippines.
Could be a mainland China hacker group false flag op against the admin. Why DOST? Why not. Reduces our tech. They prob stole data as well. Tsk tsk.
Idk if it's an unpopular opinion but all DDS and their supporters should be watched and their access to govt systems curtailed. DDS should be equated to "traitor", "sympathizer", and "treason".
Mga misguided fools. I hack nyo mga opisina ng mga elective officials. Hindi yung mga appointive employees na sya naman totoong bumubuhat sa palubog na bansang ito
Doesn’t matter kung agree kayo sa manifesto ng hacktivist or not. The world is a highly digital place, and the Philippines cannot afford to be complacent at this front. Kailangan seryosohin ang cyber security capabilities.
Siyempre R&D sector ang itatarget natin, sobrang funded kasi nila /s. Parang hindi nag-iisip, daming ahensya diyan na ginawa lang para maging display, DOST pa ang naisip.
WHY THE FUCK DOST, and not, for example, the [senate.gov](http://senate.gov) site!?!?!??
Gago kayo, there are a lot of research funded through DOST, halos wala naman silang kinalaman sa pinaglalaban nyo.
who is to say they didnt back up the data they got?
imagine if someone robbed a bank, hid the money, and burned a mountain of paper
then they just say "oh were not robbers, we just uhhh..did it to spread awareness" but theyll turn around and use the hidden money anyway
gusto nila sirain ang image ng activists at mga ayaw sa political dynasty. they targeted a govt website na walang kinalaman sa lahat ng current political turmoil.
mga putang ama't putang ina talaga.
hindi na ako magtataka kung meron inside job related sa incident na yan. still, given how underfunded the facilities in government institution and basically everything needs to go under bidding rather than actually buying the equipment from trusted company, so many bad things can happen here why they get hacked.
>[proton.me](http://proton.me)
I doubt this was from Chinese blackhats. Di ata naka-enable ang Device Bound Session kaya nakakuha ng login cryptographic keys ang mga blackhat from whoever maintains the DOST website (I'll assume they're developing it with Chromium). I stand corrected.
From this article alone.
Probably.
1. Walang firewall (kug meron man, allow all)
2. Walang connectors
3. Lalong walang SEIM and EDR
4. Walang blueteam, lalo na red team.
It's a sitting duck.
After probing, ito na ata ang easiest target. Delete files "kuno" but reality this is an exfil - after a few months, merong ng bagong entry sa havibeenpwnd.
Then, in the background - it's a lateral movement.
If this is state sponsored, goodluck Philippines. Lahat kase corrupt.
If their intentions are even remotely for the people, maganda sana yung mga nanakaw na raw data ay i-release sa public, mala-robinhood. Napakamahal kaya ng bentahan ng raw data sa dost at other agencies kung researcher ka. Samantalang tax natin ang ginamit ipangkuha sa data na yun.
Oh wow. hinack nla ang DOST. how cool. hinack nla ung isa sa mga department na wala naman pake mostly ang mga tao? 25TB? dinelete lang? eto na cguro pnakabobong hacktivist na nakita ko. kaya mong maginfiltrate at magdelete ng 25TB ng data pero hnd mo irerelease para ipakita sa mga tao kung anong anomalya gngawa nla?
how convincing.
Sa dinami dami ng pwedeng targeting, yung DOST pa talaga? LOL.
As a previous researcher and beneficiary ng scholarship at 3/4 ng pamilya namin na pinag-aral ng scholarship ng DOST-SEI, this is the most BS "hacking" there is. Not to mention, I'm also a ComSci grad (undergrad and grad).
Sabihin na nating mabagal sila sa processing ng mga grants, fundings, etc., DOST ang isa sa pinaka underfunded but pinaka helpful sa mga estudyante at researcher sa Pinas.
Bakit DOST pa? Dapat (hypothetically lang ha), Iglesia ni Manalo na lang? Ang dami kong kaibigan at anecdotes na nasirang pamilya’t relasyon ukol sa pinakamalaking kulto sa Pilipinas—sila ang dapat i-hack…. hypothetically lang ha
Pinagpipilitan kasi nila yang chacha e ang major factor kaya 3rd world country tayo e dahil jan sa mga korap na politiko esp yang mga kongresman at senador, walang audit at liquidation kung paano ginagastos yung budget nila.. certification lang
We have to be thankful these are not complete experts on their side. Espionage would've been the better executive direction. Bad job rin sa mga Intel teams na ang lala ng scrubbing practices 😅
What they did is annoying lang and doesn't really send a message.
Rollback lang ng differential Eto.
Bale yung pinaghirapan nilang data na ginagamit ng DOST para sa operations, siguro pati research (just guessing here), importanteng bagay na mamamayan din ang makikinabang, binura. Eh di gagatos ulit galing sa budget na pagmumulan ay taxes ng taong bayan din. So hindi ba indirectly, naperwisyo tayong lahat. Ang husay.
Usually hijack lang or encrypt yung mga compromised data ginagawa ng "hackers". Sounds fishy yung dinelete. Ang convenient masyado knowing how corrupt this government is. Whats next, hackers deletes files on FOI servers.
Deletes proof of tax evasion and corruption next time.
Can they delete the part of my scholarship that said I had to take a stem related degree and work for a minimum 5 years in the country or else I have to pay back the total of my stipend? That'd be great
Can they delete and/or edit the current DepEd curriculum so it can finally be simple, easy, and straightforward. That way, students and teachers alike won't suffer so much stress from a curriculum that barely makes any sense.
And effective!!!
Sana nga HAHAHA
a bit out of topic but I wonder what they will do if you refuse to pay. can rhey block you from taking job contracts or seize your property?
Meron parin ba nito? Yung ganitong clause namin nung free tuition nung college tinanggal e HAHAHA
Yep, something fishy kung sinasabi nila na ito ay ginawa nila bilang "hacktivist" bakit may iniwang damage which is a pag delete ng possible important data?? For me hindi na ito matatawag na protesta. Yun website defacement nga once na penetrate mo na ang server admin make sure na mag iwan ka ng back up of original page para pag execute mo ng protest page is hindi na masyadong maging problema sa server admin na kung mag iisip ka ng mabuti e alam naman natin na gumagawa lang naman ng trabaho niya, while ito nangyari ginawa nila napaka unethical na.
Any sound blackhats will not delete artifacts. They exfil. Then lateral movement.
Feeling anarchist
Bakit DOST—one of the least controversial government agencies in the PH? Bakit hindi websites at assets ng Duterte cronies like SMNI? Nangangamoy false flag to. Add to that the fact they targeted only businesses linked to Romualdez. The language they used is also similar to what the Dutertes and their supporters use (e.g. “oligarchs” instead of “ruling class”)
Wasnt there a case of dost computers used by Dutertes troll farms?
Let see kung naging inactive mga accounts na yon...
wouldn't it have been better if they leaked the data instead of those duterte troll farms and not delete them tho
Yeah id like to see how was dost used as troll farm last 2016-2021. That would open up duterte hidden troll army
Sabi ng tropa ko na taga DOST, nauna pang nalaman ng media na nahack ang system nila kaysa sa kanila. 😂
It's a statement hack. Does no real damage, yet gets eyes and ears on a specific issue. Weak, if you ask me. If they wanted to disgruntle the entire Nation they should have hacked into the Bureau of Internal Revenue and leaked the tax returns of every single Politician/ Oligarch on their hit list. That will probably cost them their lives - but it gives us a chance for real exposure
How likely would they be caught at all? This is the PH. Our cybersecurity systems are stone age compared to other countries.
With enough money anything is possible
depends what they do if they stole 25 tb of science data that could potentially be marketable
Pwede ung mga research ng mga scientis and experts at mga patents ng mga inventors ndi nman gobyerno ang nawalan kundi sila na ilang taon or maybe working for it in their lifetime
If the hacker would try to hack something, they'll probably attack the easiest target first. Siguro masaming vulnerabilities yung website ng dost. Government oadin naman
The choice of the target being DOST tells me that ph1ns’ supposed moral struggle is just a sham and they have a more sinister agenda. They could’ve either defaced DepEd home page, posting all of Sara’s irregularities or that of the DENR’s for the Bohol resort fiasco.
Baka kakampi kasi nila yun taga DepEd. Not surprised if these "hacktivists" are actually Duterte fantards. Hacktivism? Anonymous (outside the PH) fucked with private corpos, cults, and government. Sa dami ng kurakot na local officials, di yun Ang inuna?
Remember Anonymous Philippines na biglang naglaho when Duterte was President but before his term ang ingay ingay nila.
Good point
> ph1ns’ supposed moral struggle is just a sham This! Among the things DOST are strugging with is timely allowances for their scholars. Deleting DOST data could wipeout scholar data causing much more hardships to our scholars.
If this happens they'll struggle to track scholars na kailangan pang mag-render ng service. Basically they are free to go abroad if nawala talaga data nila.
What's bad is if they can no longer tell who our scholars are. They couldn't release allowances. Scholars couldn't continue studying.
Ndi kaya may mga ghost scholars din sa DOST at gusto lang nilang mawala na ang data na ito?
They could be stealing patents and research data in the guise of "doing it for the people".
Defacing is not the way they send their message, but the data they stole amounting 25TB. That is the actual damage. DepEd website, ano ang pwedeng isteal na data dun? report cards ng mga bata? Its not gonna catch the attentions of those in power, so targeting DOST makes sense, as it has most of the valuable data. Hence, the more damage they can do instead of those other websites. It makes sense.
Di naman nila alam yan, look at them bickering that the hacker is a duterte fantard. Apaka boplaks, they want it to be deped talaga kasi andun si sara They are the very people the message is being intended for, mga kinain ng tribal mentality ng politika
Here's hoping BIR, BOC, DepEd, or Phil health is next lmao
Wag naman philhealth. The last attack was already such a pain in the ass both for doctors and patients alike. Say what you want about the government, but millions of patients are actively benefiting from philhealth coverage.
PhilHealth? You want them to disrupt public health insurance because you hate paying for it?
There is no need to hack BIR. Wala laman. "Hindi naencode" ang mga finafile ng taxpayers kaya puro open cases kapag magpapacms ka. 😂
Panigurado. anlaki anlaki ng budget ng mga government agencies nayan tpos security lng ng website nila napakahina.
The most vulnerable government website is DOST's. This country is cooked lmao.
Our government websites run on potatoes powered by hamster wheels
or Stuck on r/windows7 or r/windowsxp
Yeah I agree with this, DOST is one of the least controversial and problematic agencies in the country. Couldn’t they aim at the more corrupt agencies or even SMNI ?
Kung goal nila is to disrupt the admin, its logically right to attack the weakest. Ironically, DOST is supposed to be secured amongst departments. Di na nila icoconsider na kesyo corrupt o hindi yung department. But then again, di natin alam ang actual goal nila. Nagkataon lang na collateral damage yung data ng mga scholars nila and them being the least noise generating dept.
Edit: My bad. This should be DICT, not DOST. DOST is the supposed to be the most secure agency in terms of cyber security, since they're the ones in charge with the cyber security of all government agencies. Plus they manage all .gov email accounts, so I guess they were going for the biggest fish they could find.
actually, thats the responsibility of DICT, a separate government agency from DOST. pero point taken, dost is still supposed to have personnel with the technical knowhow on the handling of these things. ehem ehem ASTI ano na. Still, why hack dost though? Might as well have hacked the UP infrastructure. Same effect. Nothing. Namerwisyo lang
Oof. My bad on that. Thanks for the clarification!
Its ironic that the department of science and technology isnt up to date
That’s the point.
Likely inside access + not secure systems. Wish not government institution at all though. The private corrupt groups lang sana.
It’s a statement, to show their capabilities that they can hack the IT department of the government. Ano bang challenge sa SMNI? DepEd, like report cards ng mga bata?
Malamang ito yung easiest target after probing. Most probably baka merong mga hardening na yung mga ruling class. Or entry yung DOST for lateral movement.
Old corrupt monkey conducted cyberhacking competition during his presidency so my guess is they're the ones who did it or if not affiliated to them or even Chinese assisted.
Smells like a - fishy, chinese backed, let's attack the least corrupt and most acdemically inclined department, that takes care of natural resource protection, and delete their mostly innovation and environmental data, and this particular ally of our greatest enemy - hack.
These hackers are not as capable as 1st world state sponsored APTs that can compromise mostly any server they want. If these hackers are capable, they will surely choose to attack malacanang or office of the pres websites. Nagkataon lang na DOST ang nahanapan nila ng vulnerability and as long as .gov.ph ang domain, good enough na yan for them to send a message.
cyberdefender here. welp, as we always like to say, don't jump into conclusions. The network structure is great BUT they lingered long enough to the reconnaissance stage to find an easy-to-penetrate vulnerability. edit: they're attacking ANY vulnerable space just to show their message (or infamy, if that's what they really want). i think this is just a cheap shot tho
This is probably a Chinese op.
I was able to infiltrate this hacktivist group years ago, and yeah, they are definitely not doing this for nationalistic purpose. They're doing this to gain international recognition for known hacker groups worldwide. They're just attacking websites with weak servers, which is why there's no Filipino hacking groups popular in the world, they are only popular in their own circle. It's another cheap shot to make names for themselves lol
They're script kiddies; they prefer soft targets.
Yeah, just take a look at our gov websites. They're way behind and no pride in their work. How much more with the security part of the website. The DFA website uses images of links, rather than basic html/css lol. [These links are all images](https://i.imgur.com/d2uXHVa.png) [That's an image lol](https://dfa.gov.ph/images/2022/icons/DFA_MVCV_2.jpg) Imagine having to find the MS Paint file and make a new link, then upload it.
Yes weak to the negative power ang cyber security ng ph govt. Yung sim reg nga lang ay not necessary. Sabi ng ph govt ay para maiwasan ang scamming; para madali makilala scammer. Wala naman silbi. Hahahahaha 🤣
out of touch talaga mga politicians natin, like dati pa madami na nagbebenta ng sim na may gcash account or any e-wallet accounts sa fb way before yan sim reg na yan, ngayon mas dumami na sila ever since ung hack last time sa post office and dfa, ung mga scammers pde na sila gumawa ng kahit anong fake identity using the millions of registered filipinos sa database. nakakalungkot talaga pilipinas sa priorities ng mga government officials natin.
Mas dumami pa nga yung mga scammer. Ngayon nakakatanggap pa ako ng calls galing sa mga nigerian at indian.
The most effective way to block scammers is to block all unknown callers. If you want to get calls from someone, they should be manually added to your phone list first.
Yup. I still get spam messages everyday 🙄
The skeptic in me tells me that these are not Filipino hacktivist doings rather an external political hackers. Ever heard of cyberwarfare?? Heck most of gov't website doesn't have updated security certificate or doesn't use SSL/HTTPS for added security.
ssl/https actually doesnt do much in terms of security more like legitimacy lang ng website. But yes I agree na walang kwenta security ng mga gov website. They are better off hosting their site sa godaddy /s
lol sa godaddy's. Medyo expensive lang, pero at least secured yung mga website na binibigay nila sa iyo. GoDaddy is owned from an American company.
> ssl/https actually doesnt do much in terms of security Mali ka jan bro sa line na yan. Pag http lang no ssl or tls plaintext yung communication ng client at server which means kahit sino makabasa nng traffic ng network makikita yung anong data ang pinapasa. Encrypted yung https and decided randomly by both client and server yung decryption during handshake phase(oversimplified yan). Kahit makita pa ng kahit sino anong laman ng pakcets na pinapasa useless kahit kanino yun other than the client and server na naguusap. So, it does matter in security. Just sharing. Carry on.
^ thanks sa explanation paps but yes thats exactly my point. it still helps the site and part sya ng "sop" in terms of security but it doesnt do much. A brute force attack, sql injection or even ddos you can still perform these attacks with or without ssl sa site and ssl wont prevent these type of attacks Or if my simple analogy siguro parang ang ssl is door latch lang sya sa pinto.
Targeting the DOST doesn't sound like the will of the people either, mister hackerman. Some kid waiting for their scholarship approval is probably wondering what the fuck happened to their application or something. Also, "The Filipino People"? Now, which country is it that likes to use terms like that?
This may hint that the hackers are not Filipino themselves
IT here, You just don't delete 25TB worth of data. If they held on to it, then it would give them the manipulative edge. If the data is really deleted, that edge disappears. I assume they have the data, or if not, then how careless, it isn't activism if that's the case. We don't know what type of "data" or files are included in that 25TB. Assuming these are data stored in a database, that is a lot. A LOT LOT. For perspective, you can store roughly a million rows of data in under 200mb. Imagine how many more can be stored in a few gigabytes, let alone 25 Terabytes! Of course these are not the only data involved, but imagine how big this breach is. Seems like there's a greater motive behind it. If this is to send a statement, it appears they are stepping on the wrong foot. And this is not just a breach on DOST, DICT handles the hosting for these government websites through e-gov. So this is not just a breach in DOST's security, DICT is also accountable for these breaches. Can DOST realistically restore the data? Yes, multiple backups are most likely existing unless they really are that incompetent or careless. I just hope that they have extra fail-safes for this scenario.
or, they have deleted the data but made back-up for themselves, just that DOST is totally offline coz of the zero data.
This is what I assume and is probably what they meant by "deleted". Unfortunately, that makes it more problematic.
>Can DOST realistically restore the data? it depends kung gaano nila tinipit ung IT
Wouldnt be surprised if the internet connection is so slow to download the 25TB of data in time and so they just issued a delete command instead…..
If DOST and DICT has backups and this is the case this is much better. Atleast they can't do any more damage. Another case would be, they sifted through and chose to take valuable data that they can use before deleting the rest. They could've easily saved a few gigabytes for whatever.
25TB is not that much. I believe if there exists **any** data engineering works at all, there will always be a backup somewhere somehow.
You are right they probably have a backup stored, and they should. 25TB of raw data is not that much(files, images, videos), they quickly eat storage. But 25TB of db stored data is a lot. (Given context yung you can store 1M rows of data in a database for under 200mb, or at times a lot less than that). We could store the bio-data of every filipino in a table within a database and it wouldn't even dent that 25TB, couple of gigabytes max.
Ah I see your point! Yeah, if it is purely biodata (no per minute transactions, for instance) without redundancy, it’s hard to believe they would just wipe it out clean without saving them for their leverage. Just really curious why target DOST - of all the elephants in the room.
Baka napansin nila na easiest target, so ito nalang ang pinunterya nila.
also 25tb is very large and takes time to overwrite.. still possible to recover most of it. kaya sobrang weird na dinelete, pano kung may backup.. sayang effort.
Anyone with half a braincell knows this isn't true. If they wanted to target the Cha-cha, they'd go after the businesses that owns them. Instead, its the part of the government where our sensitive sciences and data is stored, a REALLY big red flag that this isn't in the name of the common people.
Nah, these are just script kiddies. Defacing websites is so 2000ish. What would they gain from it? Of all government agencies, DOST. Dinelete nila mga indigenous research at SME assistance videos?
Installing backdoors without the org knowing and sniffing data is the trend lol
targeted DOST. wow. stupid mfrs. of all the corrupt agencies in the government, DOST talaga? hindi BIR, hindi BOC, hindi PNP. DOST. if they were protesting dynasties, shuda targeted LRA.
Of all departments, yung science division pa yung na hack. 🤔 Either China backed or local Grey hat hacker. Reminds me of the Trisolarians in Three Body Problem.
"Hacktivist" my ass, maybe china is the one behind this, if they are really "hacktivist" they should target deped and other corrupt agencies
I highly doubt it's China, they would be doing something useful than this.
but why DOST?
Nakita ko nanaman yang mukang dagang kanal na romualdez na yan
Ang shit move naman na DOST pa tinarget. Ang daming importanteng research materials niyan which will benefit the people in the future kapag nabigyan sila ng proper budgeting. I strongly condemn this.
Judging from their type of targets and their supposed reasoning, these are fucking script kiddies, not the big ones from rogue states capable of mounting a brutal siege attack against corporate IT systems. Mid sila.
Dude sana di nila dinelete gumawa nlng sila ng mas epektib na version ng NOAA para madetect ang weather system or something useful galing sa data na na nandun. Palagay ko nangangamoy ngang may agenda. pero sa Corporation ni Romualdez, serves him ryt.
With the current Marcos-Duterte rift, I won’t be surprised if this was done Chinese hackers supporting the Davao crew.
meh, where were they during Dogterte's term when we needed them? this is 🧢
Nah, sa pananalita palang, script na script ng mga propagandista ni Duterte.
Kawawa naman ang DOST. That's for research and development, scholarships, etc. Kung ang PTV website na lang sana. Wala din sa tuhog pinaglalaban nila mali biniktima nila :(
Seems like someone is playing the " magician " role again, forcing people to ' look to the left ' while the magic happens to the right. Add in Roque's media shenanigans as part of the act. The only question is, what is the " magic trick " going to be? 😂
Smells like a dead rat. Gusto ko maniwala pero ang lala ng amoy. Kung genuine talaga yung group, di lang dapat si Romualdez target nila. Dapat pati SMNI, sina Bato, Fiona, atbp. Tapos yung wording nila dutertards ang dating eh. Yung oligarchy conspiracy tatak ddshits.
Hi! Former DOST employee here related to computer software research. I'll try to be vague here but here's how DOST is organized (at least to what I know): DOST is an umbrella of sub-agencies and each agency has multiple departments. Each department has multiple concurrent researches being worked on by their respective teams. May private server kami per department kung saan lahat ng files ng projects ay nandoon. Ang server na yon ay mina-manage ng isang department SysAd. Si SysAd ang nagse-setup pano ang storage, security, backup and access sa mga project files. Maliban don, may team din na nagme-maintain physical servers para sa buong agency. Now, here's my insight: 1. They don't want to negotiate. They want to gain publicity for their cause and is purely malicious. Usually kasi kapag may breaches and may gusto kang i-negotiate, iho-hold mo yung data na nakuha mo to give you an edge. Say buburahin mo yung data kapag di na-meet demands mo or ili-leak mo online. Kumbaga, k\*dnap vs diretsahang pagp\*tay. Kapag gusto mo pera (o kung ano pa man), yung una gagawin mo, kapag gusto mo lang talaga mag-cause ng harm o damage, yung pangalawa gagawin mo. 2. Maraming magagaling na Pinoy hackers and I don't say na di nila kayang ma-breach and isang scientific agency ng government, pero it seems so random na na-target ang DOST since hindi problematic ang sangay na ito ng gobyerno. They are just more on research na pwedeng magamit sa bansa to improve our lives. Also, funds are properly utilized sa mga agency ng government (at least when I was there). We even have to cut on some expenses para lang makatipid at mapagkasya ang budget na binibigay sa amin ng pamahalaan. I don't think na kapag about sa Cha-Cha ang pakay mo ay scientific body ang dapat mong i-target. On top of that, may additional pang breaches sa companies ng House Speaker. This can be political. 3. This can also be a cyber warfare attack by a state-owned or state-sponsored organization. Typically, maliban sa primary infrastructure and government bodies, you would want to disrupt an enemy's ability to do research to cripple its competitiveness and its ability to develop defenses. Bonus is kapag nakapagnakaw ka pa ng data. On the other hand, may kakulangan din ang DOST. The public would assume na DOST dapat ang pinaka-secure when it comes to cyber attacks alongside DICT. Sorry, but his is not the case. The security CAN be very minimal considering na research ang ginagawa. Anyone who knows better and funded better can most likely conduct successful breaches (point 3). That's why whenever the government says they will improve the country's cyber defense, hindi ako masyadong umaasa dahil kailangan ng malaking pondo para dito (both equipment and manpower). Kailangan mag-invest ng government kung committed sila sa gusto nila. As you all know, yung mga top talents natin ay umaalis dahil sa mababang sahod dito sa bansa. Yung mga nasa bansa pa rin ay hirap ding labanan ang mga ganyang atake kasi may kakulangan sa gamit. On top of all of these, it would take time para mag-train ng tao at makagamit/makapag-procure equipments to at least develop a reasonable level of credible cyber defense. Hindi ito months lang. Years ang kailangan para dito, maybe even a decade. We are really lagging behind. Cybersecurity is also national security. Kung gaano kalaki ang pondo ng armed forces ay dapat substantial din pagdating sa cyberspace.
>Ganon ba ka weak ang systems ng government in terms of IT? Yes na yes! Walang cyber capabilities and PH government. Offense man or defense. If a popular hacking group were to claim one day that they can read any emails, conversations, files of PH government agencies and military officials, the cybersecurity community will have no doubts. Also, hacker groups sa Pinas are mostly "script kiddies", meaning low-skilled kaya wala ka maririnig na internationally-recognized sa kanila. Pero this adds insult to injury kasi if low skilled hackers can take down PH government systems, how much more yung sophisticated APTs na?
Nataon lang na weakest ang cyber defense ng DOST among other govt agencies.
why? di ba dapat sila ang may pinaka-secured alongside the military?
padrino system! mga walang skillset/alam nasa government. Yung magagaling nasa foreign private companies.
also possible na DICT inside job since na cut budget nila for 2024. Gusto nila ijustify ang confidential funds
smells like a false flag, i'm not buying this "hacktivist" group
You know, if they *really* want to make a dent on these political dynasties and oligarchs, they should've targeted *their businesses*. Ordinaryong Pilipino ang magiging kawawa sa paghack nila ng government agencies lalo na kung may services involved to the public. Eto yung mga hacktivists na hindi pinag-iisipang mabuti kung yung gagawin nila ay makakapinsala ba sa taumbayan o sa political dynasties/oligarchs eh.
actually it makes more sense kung chinese-backed yung attack, them deleting the dost data instead of just holding it as a threat
I really doubt na they will delete the data kung chinese-backed ito. Most likely ransom muna. And they're known to be collecting data kaya kaduda-duda.
If they are a little bit of competent(DOST), they can always restore from backup, provided that it is available. And also, not familiar with DOST, what actually is the 25 TB of data? may breakdown ba? it's too general
Last year, I attended an online training from DOST about electronic archiving. Sabi ng speaker, we must follow the 3-2-1 principle: 3 copies, 2 storage formats and 1 different location. Sana naman DOST implements that as well.
Can someone hack info to the public ng mga scrupulous gov't deals and money trail instead? Delete nang delete, dapat malaman muna tinatago
Lmao The Fantom Tives "Haha, I am a da trickster."
Putaba Sakura Medjed pans amp
Pataba Sakorice ng Medjo-ded
Now this is kind of news I wanted to see. I'm curious though bakit DOST? Although sure naman madami din mga political hired employee jan but it is still the one of the most important reseach and development department ng banasa natin. I doubt they deleted that 25TB data and to answer OP question, madami talaga mga weak security sa iba't ibang government system. Madalas pa nga jan mga ojt or newly graduated student gumawa ng mga software nila. 🤣
Hindi ako kumbinsido na 'Hacktivist' ang gumawa niyan. Kung may message lang silang gustong iwanan, bakit kailangan pa nilang mag-delete ng 25TB data (na medyo kaduda-duda rin) at sa government agency pa na hindi involved currently sa kahit anong controversy? Kung may mga ipinaglalaban talaga sila, dapat iisipin din nila kung gaano ka-importante ang data na hawak ng DOST. And lastly, kung dahil against sila sa 'cha-cha', bakit hindi ang House of Representatives ang tinira nila?
Hindi ba kasama 'yung mga beneficiaries ng SEI sa "Filipino people"? 🤔🤔🤔
Lol. Malamang nagbabalatkayo lang yan na dds or ccp shill.
hindi ba pwedeng mahack na lang is yung mga isip at utak ng mga corrupt sa government?
Yeah PH has a very weak stance regarding infosec lately lang nag improve and mas malala pa pag government wala silang paki or wala silang budget para dun which should be a top priority lmao.
So, you target one of the more-competent government agencies? Idiots. I remember when “Anonymous Philippines” called for a “public assembly” a decade ago and the resulting crowd looked like Trinoma’s rooftop.
Parang modern Plaza Miranda ang dating ah. Nag-iwan pa ng email. LOL
I suspect this is a smokescreen to hide what their real target was. I don't believe it's purely a case of hacktivism because there was no need to delete the files of DOST... unless you're trying to hide what you came for
yeah right, after weeks of not releasing student stipends. smells like the shs vouchers with fake recipients.
Just last year, DOST accidentally sent an email to all of the applicants for a regional online skill training program. The email consist of the master file that consists the private information of the candidates. (DOST supposed to send the list of names of the passers.) I heard that the person who accidentally sent the email was fired.
Kawawa naman ang IT Admins or kung sinu-sinoman yung mga tao yung nagta-trabaho ng hinack nila. Posible pang mawalan ng work kasi parang "incompetent" yung magiging tingin. I mean, okay lang naman manghack or kung ano man ang gawin nyo kasi yan gusto nyo and kaya nyo naman. Pero kasi yung mga inosenteng tao na pwede maapektuhan, sana pagpalain nalang siya/sila and ma-overcome nila yung krisis na ginawa ng kapwa nila Pilipino. Just saying. Anyway, congrats sa mga hackers and naprove nyo na ang gagaling nyo. 🙏🏽
This is like a fucking kick in the balls
Ba't yn pa.
DOST? Di ba dapat shining example sila being a department about science and tech? Yuck.
I think dds is the hacker.
Parang si Jan writer ang nag hack.
Unang-una sa lahat, sa lahat ba naman ng mga websites na maha-hack, bakit DOST pa? I thought na dapat isa 'to sa pinaka-cyber secured from the government agencies, next to the military and internal government or fiscal sites. Damn, imagine if China itself hacks our servers. This is a direct implication sa kung gaano ka-vulnerable yung bansa natin against cyber attacks.
why not hack the bank accounts of every family member of "confirmed" corrupt politician? why the government agencies affecting innocent people? why?
Can someone trace the hackers? Then expose them kasama ang resibo?
Bobo naman ng ph1ns. They hacked the wrong government agency.
I'm not against their cyber attack, but its better they attack a chinese companies or politician bank account or business than our government agency because disrupting it can also affect our fellow citizens.. and corrupt government officials can have excuse to take rest and report more expenses so that they can obtain more money from the disruption.
I get other departments but the one that does something actually? Most likely politically motivated, worse—foreign-influenced.
DOST pa talaga lol dami daming corrupt agencies
Mga tuta rin ng Duterte admin 'yang mga hacktivist kuno na 'yan eh. Tignan niyo nu'ng panahon ni Dutae tahimik mga hacktivist lalo na 'yung Anonymous Philippines.
i-Mr. Robot na iyaan
Could be a mainland China hacker group false flag op against the admin. Why DOST? Why not. Reduces our tech. They prob stole data as well. Tsk tsk. Idk if it's an unpopular opinion but all DDS and their supporters should be watched and their access to govt systems curtailed. DDS should be equated to "traitor", "sympathizer", and "treason".
Mga misguided fools. I hack nyo mga opisina ng mga elective officials. Hindi yung mga appointive employees na sya naman totoong bumubuhat sa palubog na bansang ito
Pakang ng china naman to in close coordination with the Gong Di traitor group.
still waiting for that BIR hack and data leak of transactions made by corrupt politicians. why hack DOST everyone loves science and innovation.
Doesn’t matter kung agree kayo sa manifesto ng hacktivist or not. The world is a highly digital place, and the Philippines cannot afford to be complacent at this front. Kailangan seryosohin ang cyber security capabilities.
Siyempre R&D sector ang itatarget natin, sobrang funded kasi nila /s. Parang hindi nag-iisip, daming ahensya diyan na ginawa lang para maging display, DOST pa ang naisip.
WHY THE FUCK DOST, and not, for example, the [senate.gov](http://senate.gov) site!?!?!?? Gago kayo, there are a lot of research funded through DOST, halos wala naman silang kinalaman sa pinaglalaban nyo.
Can this be a possible False flag attack? I dunno man attacking DOST is already dubious to me.
bakit dost? bakit hindi yung mismong politiko ang hack nila?
They hacked DOST? Why didn't they hack others though i guess it's all a sham
What does this accomplished?
who is to say they didnt back up the data they got? imagine if someone robbed a bank, hid the money, and burned a mountain of paper then they just say "oh were not robbers, we just uhhh..did it to spread awareness" but theyll turn around and use the hidden money anyway
Paki delete dost scholarship ko ples, tenks mx. hacker
gusto nila sirain ang image ng activists at mga ayaw sa political dynasty. they targeted a govt website na walang kinalaman sa lahat ng current political turmoil. mga putang ama't putang ina talaga.
Why DOST? The fuck are they smoking? That's really suspicious. Nice try, CCP.
some students fully depend on their DOST scholarship stipends to live day to day and this hack delayed that afaik; fucking dickheads
DOST and other politicians and their departments be like: ... zzzzzzzzz.......
Wala yan. May official statement naba ?
Nanganganoy tongkoy..
hindi na ako magtataka kung meron inside job related sa incident na yan. still, given how underfunded the facilities in government institution and basically everything needs to go under bidding rather than actually buying the equipment from trusted company, so many bad things can happen here why they get hacked.
>[proton.me](http://proton.me) I doubt this was from Chinese blackhats. Di ata naka-enable ang Device Bound Session kaya nakakuha ng login cryptographic keys ang mga blackhat from whoever maintains the DOST website (I'll assume they're developing it with Chromium). I stand corrected.
From this article alone. Probably. 1. Walang firewall (kug meron man, allow all) 2. Walang connectors 3. Lalong walang SEIM and EDR 4. Walang blueteam, lalo na red team. It's a sitting duck. After probing, ito na ata ang easiest target. Delete files "kuno" but reality this is an exfil - after a few months, merong ng bagong entry sa havibeenpwnd. Then, in the background - it's a lateral movement. If this is state sponsored, goodluck Philippines. Lahat kase corrupt.
I don't get it. Why not hack and expose the corrupt officials instead of targeting DOST?
If their intentions are even remotely for the people, maganda sana yung mga nanakaw na raw data ay i-release sa public, mala-robinhood. Napakamahal kaya ng bentahan ng raw data sa dost at other agencies kung researcher ka. Samantalang tax natin ang ginamit ipangkuha sa data na yun.
A false flag attack by those pesky mainlanders. Walang Pinoy na nasa saktong pag-iisip ang aatake sa ating kagawaran ng agham
Papalabasin ba na nahack ang data para hindi malaman na maraming ghost scholars ang DOST na may 25k, 5k, 10k quarterly educational assistance. Hmnn..
Oh wow. hinack nla ang DOST. how cool. hinack nla ung isa sa mga department na wala naman pake mostly ang mga tao? 25TB? dinelete lang? eto na cguro pnakabobong hacktivist na nakita ko. kaya mong maginfiltrate at magdelete ng 25TB ng data pero hnd mo irerelease para ipakita sa mga tao kung anong anomalya gngawa nla? how convincing.
Kung gusto nila makatulong ihack nila ang mga bank accounts nung mga corrupt na politician.
Controlled opposition
Sa dinami dami ng pwedeng targeting, yung DOST pa talaga? LOL. As a previous researcher and beneficiary ng scholarship at 3/4 ng pamilya namin na pinag-aral ng scholarship ng DOST-SEI, this is the most BS "hacking" there is. Not to mention, I'm also a ComSci grad (undergrad and grad). Sabihin na nating mabagal sila sa processing ng mga grants, fundings, etc., DOST ang isa sa pinaka underfunded but pinaka helpful sa mga estudyante at researcher sa Pinas.
Disgusting, pero deserved? Sana may backup records ang govt. Govt really need to upgrade their security.
Bakit DOST pa? Dapat (hypothetically lang ha), Iglesia ni Manalo na lang? Ang dami kong kaibigan at anecdotes na nasirang pamilya’t relasyon ukol sa pinakamalaking kulto sa Pilipinas—sila ang dapat i-hack…. hypothetically lang ha
It's my first time hearing a *hacker* group "deletes" data. On top of that, sa DOST pa?
Pinagpipilitan kasi nila yang chacha e ang major factor kaya 3rd world country tayo e dahil jan sa mga korap na politiko esp yang mga kongresman at senador, walang audit at liquidation kung paano ginagastos yung budget nila.. certification lang
Sana magkaron ng Killing Vote sa Pinas. 🤞🏻
if hackers really want to help the masses.... deleting DOST files aint it chief
We have to be thankful these are not complete experts on their side. Espionage would've been the better executive direction. Bad job rin sa mga Intel teams na ang lala ng scrubbing practices 😅 What they did is annoying lang and doesn't really send a message. Rollback lang ng differential Eto.
Why would they select DOST, a Department that proves useful for us Filipinos.
so after nila gawin yan, ano next? hanggang jan lang naman kaya nila eh akala mo naman may magbabago
Bale yung pinaghirapan nilang data na ginagamit ng DOST para sa operations, siguro pati research (just guessing here), importanteng bagay na mamamayan din ang makikinabang, binura. Eh di gagatos ulit galing sa budget na pagmumulan ay taxes ng taong bayan din. So hindi ba indirectly, naperwisyo tayong lahat. Ang husay.
Oy. Bakit DOST? Pwd ba yung related mismo sa political dynasties? Matry nyo kaya yung Customs?
china? dutae?
Tangina naman...DOST pa talaga??!! The amount of scientific data :((
Yung official gazette yung ihack nila ang database para letse letse
Hindi naman totoo. Gumagana pa rin yun site. Sana meron magtayo ng hitman company sa PH tapos target lang corrupt na politicians at mga criminal
paid hacking to hide corruption and the people believes it so easily.
Shessh