The Closer Look |

An online log of a student's thoughts on deliberate national concerns in the Philippines, specifically the issue on transparency in the reigning administration. The latter portion of this blog tackles the issue on hacking.

[thecloserlook-blog]

Radio Veritas Hacked

A very much similar incident with the hacking of Vice President Binay's website was reported just recently. Radio Veritas, a Filipino Catholic radio station, found its website defaced early Sunday morning. The original fix of the online portal was replaced with a plain white page with a text and image link that said absolutely nothing regarding the intent of the website hacker.

Assumptions of individuals have been gearing towards the motive to express concerns regarding the controversial Reproductive Health Bill and the stand of the Catholic Church.  However, there are still no developments regarding the incident. 

Cyber threats such as this poses great danger for organizations and Filipinos as a whole. If this would be happening every time a clash of opinion, no more organization would use websites as a communication tool unless developments that would give users a security assurance of 99%. 

Reference:

Radio Veritas Website Hacked, Defaced (2012). GMA News Online. Retrieved from http://www.gmanetwork.com/news/story/270373/scitech/technology/radio-veritas-website-hacked-defaced

[thecloserlook-blog]

Dollar Account Hacked

Another hacking incident was covered by various headlines a few days back. It is said that a dollar account in a Philippine bank has been nearly emptied by illegal parties that had an IP Address traced to be assigned in Malaysia. 

Investigations stated that the hacker has been observing and controlling the said account for a while already. This was supported by the move of the hacker copying the messaging style of the real client of the said Philippine Bank.

The thief, utilizing the Yahoo! Account of the client, mailed the representative of the bank, asking the personnel to wire a certain amount in dollars. Of course, the bank assistant continued with the transaction thinking that the client was the one using the said mail account. A rough estimate of 23,000 to 28,000 dollars has been transferred to an account accessed by the hacker. The real client found out the happening the next day but was already too late.

These cyber crimes pose a great threat to the banking industry of the Philippines, giving out an impression that companies cannot assure clients of the safety of transactions online. This can be take against Yahoo! as well. Foreign investors might be discouraged to have transactions and investments due to the reported event. 

Reference:

Agustin, V. (2012). COCKTALES: Hacker cleans up dollar account in Philippine bank. InterAksyon. Retrieved from http://www.interaksyon.com/business/40145/cocktales--hacker-cleans-up-dollar-account-in-philippine-bank

[thecloserlook-blog]

BPI ATMs Hacked

The attention of account holders of The Bank of the Philippine Islands have been called when an SMS asking them to change their personal identification numbers immediately was sent out by the said bank.

It was reported that 3 machines have been found to have devices illegally planted in them. The devices were said to have gathered private account information from BPI's clients, pushing the management to implement additional security measures. 

Similar to the government website hacking incidents, clients of the said bank may question the ability of the said organization to protect their accounts. This might be more crucial for not only client information is put to risk but also monetary assets.  Filipinos might lose trust in the company because of such circumstances. Having to be an account and card holder of the Bank of the Philippine Islands, I myself is threatened by the situation. This may be the time for Banks to invest on cyber and technological security installments. 

Reference:

Vallecera, J. (2012). Security breach reported in 3 of BPI's 1680 ATMs. Business Mirror. Retrieved from http://www.businessmirror.com.ph/home/banking-a-finance/28827-security-breach-reported-in-3-of-bpis-1680-atms-

[thecloserlook-blog]

After the report on KC Montero's Twitter account being hacked, just recently, The official website of Vice President Jejomar Binay was reported to had been defaced as well. This time, it was not the Chinese people responsible for the incident, but co-Filipinos, who were said to be part of a group called "PrivateX."

No confidential was obtained by the hackers, instead, they expressed their sentiments regarding the proposed cyber security bill and exclaimed that the said legislation may jeopardize freedom of expression as well as "Philippines' cyber culture." The group stated that the act would also not benefit the Filipino society but favors only a few in power. 

Due to this event, of course the credibility of the Office of the Vice President will be doubted. Furthermore, the intentions of Binay regarding the passage of the bill will also be questioned by the public. 

For access to the Cyber Security Act of 2012, click the following link:

http://www.slideshare.net/jimayson/the-philippine-cybercrime-bill

Reference:

Reyes, F. (2012). Vice President Binay's website hacked. Inquirer Technology. Retrieved from http://technology.inquirer.net/12081/vice-president-binays-website-hacked

[thecloserlook-blog]

KC Montero's Twitter Hacked

Setting aside the issue on government websites, A public figure's Twitter account was also hacked a few weeks after the cyber war. Reports say that KC Montero sought advice and help from authorities regarding the said incident.

Following this, observers noticed that Montero exchanged a number of tweets with another Twitter user. Basing from the tweets exchanged, Montero was able to make the individual admit online that he/she knows about the said incident and that the hacker was a friend. After which, Montero expressed that he is very much on the verge of seeking legal counsel and having the two individuals pay for the cybercrime. 

There has been no news whether the hacker and alleged accessory has been arrested. But this just show that even celebrities can be a hacking victim. Therefore, we should observe more caution.

Reference:

Sanchez, R.J. (2012). KC Montero seeks help from authorities for Twitter hacking incident. Manila Bulletin. Retrieved from http://www.mb.com.ph/node/318874/kc-montero-

[thecloserlook-blog]

Evaluating Government Websites

Due to the series of hacking incidents occurring this year, the Information Communications Technology Office has expressed its thoughts on the need to have an evaluation of government websites--which I personally agree with. I think the it would be beneficial for government agencies as well as individuals and private companies to conduct regular check-up on their online systems and accounts. This is to maintain and check whether there are loopholes present in the system. However, there is still no word that the government websites were indeed evaluated. 

In relation to this, a suggestion was also made to integrate all the government websites into one system. Many have expressed their opinions on the raised idea however I do think it is illogical to do such a thing. It would also just put the government organizations and well as their data and portals at a greater risk.

Reference:

Vllavicencio, P. (2012). ICT office calls for security evaluation of gov't websites. InterAksyon. Retrieved from http://www.interaksyon.com/infotech/ict-office-calls-for-security-evaluation-of-gov%E2%80%99t-websites

[thecloserlook-blog]

The IPA Power

Recapping from my previous post, I noticed that the DITC Bill was approved last March. Just a month before the alleged cyberwar with China. Did the DITC act in response to the controversy? This leaves spectators, including me, curious as to how the said agency will perform. Having to research regarding the issue extensively for a few week now, I still haven't stumbled upon one article reporting moves by the said agency. 

Relating this to the mentioned allegations on China hacking Filipino domains, A professional on the field of Information Technology stated that after attempts to trace the hacker through the so-called Internet Protocol Address, data gathered shows that the IP Addresses used was assigned to China. However, the expert also advised that there are instances wherein hackers obtain fake IP Addresses. This should be taken into consideration before settling to a conclusion that hakcers indeed came from the said country.

China has already been receiving a lot of criticisms worldwide for supposedly providing funds for hacking operations. On the other hand, the incident, up to now, is stirring fear from Filipino organizations and individual users.

Reference: 

Placido, D. (2012). PH-China hacker wars may affect banks, telcos. ABS-CBN News. Retrieved from http://www.abs-cbnnews.com/business/04/23/12/ph-china-hacker-wars-could-affect-banks-telcos

[thecloserlook-blog]

A government agency which aims to address problems regarding information technology and cyber security has just been approved last March. This made a lot of Filipinos as well as companies very much grateful that at last, after number of hacking incidents, the government is finally acting on the issue.

However, because of the recent encounter with China, this still leaves the Filipinos curious as to how the said agency would exercise their authority and respond to such matters.

To view the full DICT bill, click the following link:

http://www.comste.gov.ph/legislation/dict-bill 

Reference: 

Congressional Commission on Science & Technology Engineering (2012). Legislation [Image]. Retrieved from http://www.comste.gov.ph/images/dict_logo.gif

Liao, J. (2012). DICT - Now it's about time. Manila Bulletin Publishing Corporation. Retrieved from http://www.mb.com.ph/articles/355636/dict-now-its-about-time

[thecloserlook-blog]

VP Binay Attends Cyber Security Summit

Just a month ago, Vice President Jejomar Binay attended a summit held in Japan. The said event mainly tackled cyber security. The Vice President stated that the main goal of participating in such an event is to broaden the network of professionals knowledgeable on complex issues concerning the world wide web. Also, it is to familiarize ourselves with the technicalities of such field. 

It was also made known that Binay had previously attended an ASEAN forum which shed light on the importance of an intensified security when it comes to information and technology.

The initiatives performed by Binay is actually commendable. It would really be beneficial for the Filipino community if these initiatives would be continued and developed into a more concrete plan of action consisting of laws or acts addressing the mounting concerns on digital technology and hacking.

Given the rise of reported hacking incident worldwide, it is about time that we laid our hands on the usually ignored matter. This is to strengthen and have a more encompassing protection for Filipino web users especially now that more and more social networking sites are now extending their services to children. With a more broad network of experts with regards to cyber security, collaborations with these professionals can  be arranged in order to educate Filipino users and organizations as to how they can secure confidential information and protect themselves from such threats. Furthermore, the country now can act strategically, with the aid of such experts, when nationwide attacks similar to the previous China incident take place again.

Reference:

Reyes, F. (2012). Binay flies to Japan for cyber security summit. Inquirer Technology. Retrieved from http://technology.inquirer.net/14045/binay-flies-to-japan-for-cyber-security-summit

[thecloserlook-blog]

The LinkedIn Incident

A few months ago, several complaints concerning LinkedIn, a site which enables its users to post information relevant to job hunting (such as resumes) so that it would be easier for Human Resource Officers of different companies to hire employees, surfaced. The issue was specific to an alleged breach of contract. LinkedIn was said to have failed to protect its users' information when hackers stormed the site and retrieved a million passwords.

A number of Filipinos actually utilize the world wide web in searching for jobs and companies. LinkedIn is one of the sites Filipino job hunters utilize. Having said this, accounts of Filipinos are very much vulnerable to hacking incidents thus, users must be extra careful online. Resumes of users may be retrieved illegally when domains have weak security. Furthermore, hackers may utilize hacked accounts of company HR personnel and use them to solicit personal information from people. 

Reference: 

Roberts, J. J. (2012). LinkedIn sued over hacking incident that exposed 6 million passwords. Gigaom. Retrieved from http://gigaom.com/2012/06/19/linkedin-will-connect-with-a-federal-judge-after-privacy-breach/

[thecloserlook-blog]

PH Hacker Conference

At this time of the year, it is common for a lot of web users to see announcements regarding hacking conferences which are held in America, which are usually attended organization executives. Who would actually think that there are also similar gatherings organized here in the Philippines? 

Rotcoon (local counterpart of the well known DefCon and BlackHat) is an annual local hacker conference. The event is said to invite various speakers to tackle relevant issues such as Information Security Gathering and to conduct demonstrations as well. It is said that "issues with specific how-to-advice to conquer tough questions and challenges in organizations" are also given emphasis in the said gathering. 

Such events are really of great significance and would really cater to the needs of various organizations here in the Philippines specially on the issue on cyber security. Having previously reported a hacking incident experienced by one of the leading Telecommunications company here in the Philippines, Globe, organizations should be more cautious and vigilant. These conferences would help equip organizations with the essential knowledge needed to keep their patrons as well as employees secure and protected. Individuals are also encourage to participate with the said event. 

It wouldn't hurt to assure the security of you and your organization. Equip yourselves. 

For more information regarding the conference, click the following link:

https://www.rootcon.org/xml/rootcon6/tracks

Reference:

Annual Hacker Conference? (2012). Hack Philippines. Retrieved from http://www.hack.ph/annual-hacker-conference/

[thecloserlook-blog]

Senator Ed Angara is firmly pushing for two bills addressing Information Technology concerns after reports on a call center personnel allegedly offering illegal arrangements to an Australian television network. Because of the said incident, the reputation of the BPO firm involved in the situation is definitely affected. Foreign investors might also be discouraged in having local transactions.

The proposed act aims to have an official law concerning cyber crimes here in the Philippines which protects both local and foreign investors as well as companies.

Accordiing to the Senate of the Philippines 15th Congress (2012), "the Cybercrime Prevention Act lays down a comprehensive legal framework for the detection, investigation, apprehension, investigation and prosecution of such cybercrimes as hacking, internet fraud, data interference, identity theft and child pornography.

The Data Privacy Act mandates both public and private entities--such as an IT-BPO company--to protect the integrity and confidentiality of any personal information collected from their clients, in adherence to international standards of privacy (para 6-7)." 

All I can say is.. At long last, a public authority who is doing something in order to put an end to the said issue.

Reference:

Senate of the Philippines 15th Congress (2012). Angara seeks enactment of cybercrime prevention, data privacy laws after call center incident. Retrieved from http://www.senate.gov.ph/press_release/2012/0327_angara1.asp, para.  6-7.

[thecloserlook-blog]

Anti-Hacking Team? Where? When?

Backtracking news releases regarding hacking incidents in the context of the Philippines, a news articles published November of the previous year was found.

The report discusses the plan of action of the Crime Investigation and Detection Group to utlize and operate an anti-hacking team after having a huge number of government wesbites defaced in the previous year by "289 different individuals or groups."

However, with the continuously mounting cases of hacking, I have not seen, felt, nor hear about efforts of the said team. Was the plan even executed? Knowing that there is already a huge peril concerning cyber security, it saddens me that the government is not acting urgently upon the said concern especially when the credibility as well as the reputation of the different agencies and organizations in the Philippines are greatly threatened by such incidents. This actually also affects the government for it poses that the administration is not that effective and capable in enforcing online protection for Filipino users and organizations.   

This just leaves the Filipino community questioning.. When?  When will the government actually enforce concrete plans in response to the said issue? 

Reference:

Frialde, M. (2011). CIDG to revive anti-hacking team. PhilStar. Retrieved from http://208.184.76.171/nation/top-stories/752349/cidg-to-revive-anti-hacking-team

[thecloserlook-blog]

It has been reported that 9 South Korean nationals and 7 Filipinos has been put behind bars for hacking into one of the Philippines' largest Telecom companies, Globe Telecom. The said hackers were arrested after several radis have been conducted in different areas in Metro Manila.

The arrested individuals were allegedly making international calls with only being charged the rate for a local call. These incidents caused Globe Telecom to lose some revenue. Adding to this, a number of customers have already questioned the credibility of the organization and lost their trust in the brand because of a weak security system.

Having been alerted that such occurrence has happened, the government together with telecommunications companies should implement more stricter policies that would help avoid such happenings. Most of the Filipinos are subscribed to the services of Telecom companies therefore putting clients as well as a huge number of accounts at great risk if authorities would not implement corrective action immediately. 

Reference:

16 Nabbed for Hacking Globe Telecom System (2012). Inquirer News. Retrieved from http://newsinfo.inquirer.net/240095/16-nabbed-for-hacking-globe-telecom-system

[thecloserlook-blog]

A More Secured Apple

AuthenTec, a security firm which provides "protection and fingerprint security for mobile devices," has just been bought by Apple for 350 million dollars (para. 1). Because of this,  avid customers of Apple are more assured of their privacy.

Having more and more Filipino consumers subscribing to Apple products  as well as organizations that have Apple gadgets as part of their facilities. Worried clients regarding the cyber security issue would be calmed for in a way Apple has assured the protection of accounts. The said move may win the loyalty and trust of customers in the brand thus have a good impact on their sales in the long run especially now that there has been a number of reported hacking incidents both locally and internationally. 

Reference: Apple Buys Security Firm for $350M (2012). Inquirer Technology. Retrieved from http://technology.inquirer.net/14693/apple-buys-security-firm-for-350m

[thecloserlook-blog]

A Warning for Credit Card Users

The number of hacking incidents have been on the rise due to the alleged cyber war between the Philippines and China. However, websites are not the only thing that is vulnerable to hacking. With the retrieval of confidential information of individuals through hacks, credit accounts may also be accessed without any warrant. 

A scholar was arrested during an entrapment activity last March. The scholar is said to have gained access to the credit account of a medical practitioner and have used the victim's money in purchasing airline tickets which is then sold at a much lower price.

Having said this, individuals, especially those with credit accounts, are also advised to be cautious while accessing their accounts online. Users should only enter certified portals. In order to assure or check whether a certain website is secure, the data protocol should be "https" instead of the usual "http."

Guides such as the given above is essential to be observed by everyone, especially by those handling the accounts of their organizations, in order to safeguard the vital data about their clients. 

Reference:

Sorote, R. C. J. (2012). Credit card users told: Be wary. Retrieved from http://www.philstar.com/Article.aspx?articleId=783628&publicationSubCategoryId=107

[thecloserlook-blog]

PhilStar's Website Attacked

After targeting government websites, the alleged Chinese group of hackers is now even attacking private companies as well. 

The online doman of Philippine Star, one of the leading news organizations in the Philippines, was also attacked by China. Similar to the previous incidents, a message writtend in Chinese  characters was also left up on the website of PhilStar. However, Philippine Star acted instanly, and managed to regain the site and to put it back to normal state within the span of 10 minutes.

It is said that there have been attempts on hacking Several Philippine websites after the Philippine Star incident. Furthermore, usernames and passwords of site administrators have been found posted on several forums. 

A number of websites have already been hacked. Organizations, by now, should observe online security measures in order to protect their domains. Don't wait until hackers gain access to your site. Adding to this, a statement requesting the public to stop blaming certain people for the incidents for there are still no concrete findings as to whom is responsible, was released by the reigning administration. The government also called out to the hackers to stop such actions for it is not doing any good to anyone.  

References:

Calica, A. (2012). PhilStar website hacked. PhilStar. Retrieved from http://www.philstar.com/Article.aspx?publicationSubCategoryId=63&articleId=804178

Philippine News Website Hacked (2012). Sunstar. Retrieved from http://www.sunstar.com.ph/breaking-news/2012/05/05/philippine-news-website-hacked-219811