- Information Disclosure Vulnerability Impacts 70% of Philippines’ Organisations
- Manufacturing Sector In Philippines Experiences 3.5 Times Higher Cyberattacks Compared to APAC Organisations
- Top Malware Threat In The Philippines Is Androxgh0st, A Botnet Which Steals Sensitive Information
MANILA, Philippines — Cyberattacks against Philippine organizations have surged, with over 4,000 weekly attacks per company on average, a report by Check Point Software Technologies reveals. Among these are troubling attempts to breach government systems, underscoring the escalating risks for critical infrastructure and citizen data.
In February 2024, cybercriminals targeted the Philippine government’s email systems, raising concerns about national security. More recently, the Department of Foreign Affairs disclosed a suspected data breach at APO Production Unit, the state-run corporation responsible for printing passports. This incident potentially jeopardizes the personal data of 28 million passport holders, exposing them to identity theft and fraud.
The manufacturing industry is also in the crosshairs, enduring 9,146 weekly attacks per organization, 3.5 times higher than the APAC average. Finance and banking are similarly impacted, with weekly attacks surpassing regional norms.
Adding to the complexity is the prevalence of malware like Androxgh0st, a botnet stealing sensitive information, and Lumma, which targets browser credentials and crypto wallets. Information disclosure vulnerabilities affect 70% of Philippine organizations, leaving them open to exploitation.
Teong Eng Guan, Regional Director at Check Point Software, emphasized the need for advanced defenses. “Cyberattacks in the Philippines are escalating both in frequency and sophistication, placing immense pressure on organizations to stay ahead of evolving threats.”
The rise in cyber threats calls for urgent action, especially with AI increasingly used in cybercrime. Experts urge the government and businesses to implement AI-driven, prevention-focused cybersecurity measures to protect critical systems and sensitive data.