Chinese hackers target more PH websites

Posted at 04/25/12 9:16 PM

MANILA, Philippines (UPDATED) - Chinese hackers plan to attack more Philippine government websites, according to their discussions on the Internet.

An online forum of Chinese hackers belonging to the "Silic Group" tagged the Philippine Institute of Development Studies (PIDS) and Bulacan provincial government websites that are next in their firing line.

One forum user even posted usernames and passwords of Bulacan provincial government website administrators.

The Bulacan website remained intact as of 8 p.m. Wednesday. Its log-in page for administrators has a time-lock security feature that prevents people logging in outside regular office hours.

On Wednesday night, a purported hacker from China claiming to be a member of the "Honker Union" also published on Facebook the alleged usernames and passwords of administrators of websites belonging to Radio Mindanao Network (http://www.rmn.ph), the University of the Philippines College of Arts and Letters (http://kal.upd.edu.ph), and the People Management Association of the Philippines (http://www.pmap.org.ph).

The website of the Philippine National Police (http://www.pnp.gov.ph) also seemed to be in error  as it showed only a raw index page. However it was not confirmed if the police website has been hacked.

An administrator of the Chinese hackers' forum at bbs.blackbap.org also boasted about "first-hand" details about the attack that crippled the Department of Budget and Management (DBM) website on Wednesday afternoon.

The message indicated that those who defaced the DBM website are the same ones who attacked the Vietnamese government's website, gov.vn.

The hackers allegedly discussed their attack on the DBM website in a chat hub for several minutes.

Details about the DBM server webshell address, administrator and publisher accounts were posted online.

While the Philippine government has yet to publish full details about the DBM attack, the Chinese hackers apparently turned the DBM website into a chat room.

"How Come a Small Bitch Border Country are (sic) Overconfident? And Challenged (sic) to Our Chinese Super Hacker (sic)?" the hackers posted on the DBM website in mangled English.

The hackers also post racist comments  in  the forum, referring to Filipinos as "maids who are going up against the Chinese government."

One thread on the hackers' forum, meanwhile, expressed glee at the recent attack on the University of the Philippines website.

It is not clear if members of the forum are the perpetrators of the UP website defacement.

Some of the threads on the "Silic Group" hackers' forum directly referred to the dispute between China and the Philippines over Scarborough shoal. They indicated that their attacks are linked to the issue.

One forum member referred to the Scarborough standoff as "Huangyan Island incident."

He said Chinese hackers should "punish the Philippines" and target Philippine websites, "especially its portal."

Malacañang on Monday said websites of the Official Gazette, the PCDSPO, and the Presidential Museum and Library website were targets of a denial-of-service attack.

"Information gathered through our data analysis indicated that the attack originated from IP addresses assigned to Chinese networks," Presidential Spokesperson Edwin Lacierda said in a statement.