Tech+

DICT: OWWA website cyber attack from China foiled

This photo taken on August 4, 2020 shows Prince, a member of the hacking group Red Hacker Alliance who refused to give his real name, using a website that monitors global cyberattacks on his computer at their office in Dongguan, China's southern Guangdong province. From a small, dingy office tucked away in an industrial city in southern China, one of China's last "volunteer hacker" groups maintains a final outpost in its patriotic hacking war. (Photo by NICOLAS ASFOURI / AFP) / TO GO WITH CHINA-HACKING-SECURITY,FOCUS BY LAURIE CHEN - TO GO WITH China-hacking-security,FOCUS by Laurie Chen / The erroneous mention[s] appearing in the metadata of this photo by NICOLAS ASFOURI has been modified in AFP systems in the following, we removed the HOLD HOLD HOLD in the main caption. Please immediately remove the erroneous mention[s] from all your online services and delete it (them) from your servers. If you have been authorized by AFP to distribute it (them) to third parties, please ensure that the same actions are carried out by them. Failure to promptly comply with these instructions will entail liability on your part for any continued or post notification usage. Therefore we thank you very much for all your attention and prompt action. We are sorry for the inconvenience this notification may cause and remain at your disposal for any further information you may require.

AN official from the Department of Information and Communications Technology (DICT) said that they were able to prevent a cyber attack aimed at taking down the website of the Overseas Workers Welfare Administration (OWWA).

DICT Undersecretary for Cybersecurity Jeff Ian Dy narrated that they were able to “defend” various web applications related to OWWA from cyber attacks.

“There was an attack to take down OWWA [website]… but it did not materialize because we were able to counterattack it,” Dy said.

Meanwhile, the DICT officials said they were able to trace the command and control center of the cyber attackers to be operating “from within China.”

“So we’re able to detect that the attackers’ IP address came from China Unicom. So we need to coordinate with them,” Dy said.

China Unicom or China United Network Communications Group is a Chinese state-owned telecommunications company.

However, Dy said that the Chinese government may not be directly involved in the cyberattack.

“What we can say is that the threat actors were operating from within Chinese territory,” he said.

It will be recalled that there are websites of government agencies that were attacked such as the Philippine Health Insurance Corp. (PhilHealth) which was struck by ransomware that resulted in the leak of their data.

Kiko Cueto