Infosec/Philippines

25/09/2025

PNP ACG
SMC No. 1112

𝐖𝐚𝐧𝐭𝐞𝐝 𝐟𝐨𝐫 𝐂𝐫𝐞𝐝𝐢𝐭 𝐂𝐚𝐫𝐝 𝐅𝐫𝐚𝐮𝐝 𝐀𝐫𝐫𝐞𝐬𝐭𝐞𝐝 𝐢𝐧 𝐌𝐢𝐬𝐚𝐦𝐢𝐬 𝐎𝐫𝐢𝐞𝐧𝐭𝐚𝐥

On September 23, 2025, at about 9:30 AM in Misamis Oriental, operatives of the Regional Anti-Cybercrime Unit 10 arrested a 24-year-old woman, alias “Fatima,” pursuant to a warrant of arrest.

"Fatima" is facing charges for violation of Section 9(c) of RA No. 8484 (Access Devices Regulation Act of 1998), as amended by RA No. 11449, in relation to Section 6 of RA No. 10175 (Cybercrime Prevention Act of 2012), with bail set at Php72,000.00.

Brigadier General Bernard R. Yang, Acting Director of the PNP Anti-Cybercrime Group, commended the unit for the successful operation. He also stated, “Cyber fraud remains a persistent threat that undermines financial security and public trust. Through intensified operations, the PNP ACG will continue to pursue those who exploit digital platforms for criminal gain."

25/09/2025

25/09/2025

25/09/2025

25/09/2025

25/09/2025

25/09/2025

🔥 BUG BOUNTY VILLAGE ANNOUNCEMENT!!! 🔥

It’s our first time hosting a village at the ROOTCON Hacking Conference, and we’re excited to announce that HackerOne is proud to serve as the official village sponsor of Bug Bounty Village Philippines, supporting the growth of the Philippines’ ethical hacking and bug bounty community. 🇵🇭🇵🇭🇵🇭

HackerOne is a leading bug bounty and vulnerability coordination platform that connects organizations with a global community of ethical hackers. Companies use it to identify and fix security vulnerabilities in their applications, while researchers earn rewards for responsibly reporting those issues. HackerOne has helped secure organizations such as the U.S. Department of Defense, Google, PayPal, and many others by fostering collaboration between businesses and the security community.

25/09/2025

18/09/2025

BDO Official Statement
18 September 2025

Recent social media posts by Maria Jamila Cristiana Gonzales Berenguer alleging a system compromise and insider involvement in alleged unauthorized transactions are baseless.

• In an interview with ABS-CBN, the client herself admitted that her mobile device was in the hands of other people at some point in time.

• An investigation by the Bank indicated a password reset on September 14, followed by a device registration. Such reset and device registration was validated through OTP on the client’s registered device, a day before the reported unauthorized transactions.

• There was no change in the mobile number used to receive the OTP. The client’s official device remains to be the device that receives official client communication.

• Log-in and registration alerts were sent to the client for these updates. Transaction Alerts were also sent promptly on September 15, 2025—six hours before the client reported the issue via the BDO Hotline.

• Transactions through BDO Pay require PIN or biometrics, not OTP. OTP is required only for device registration, not for transactions via BDO Pay.

• Despite the Bank’s repeated efforts to engage the client, she declined and continue to post several videos that are inaccurate.

The Bank reiterates that transfer limits were not bypassed, and our security controls remain in place.

BDO has put in place different features intended to protect clients’ accounts. These controls will not work if clients ignore warning signs and messages sent by the bank through official channels.

BDO’s system remains secure, with no evidence of any breach or insider involvement.

BDO is regulated by the BSP (www.bsp.gov.ph). Deposits are insured by PDIC up to P1 Million per depositor. Please visit the About section of the BDO Unibank page for more details.