NBI arrests 3 alleged hackers of government websites

MANILA, Philippines — The National Bureau of Investigation (NBI) announced yesterday the arrest of three individuals allegedly responsible for hacking several private and government websites, banks and Facebook accounts.

NBI Director Jaime Santiago identified the suspects as members of the hacking group LulzSec. NBI Cybercrime chief Jeremy Lotoc revealed that the suspects include a data officer of Manila Bulletin, a cybersecurity researcher and a graduating student, although their names were not disclosed.

The data officer claimed Manila Bulletin technology editor and IT expert Art Samaniego Jr. ordered the hacks to generate content for his column and social media platforms.

In a report by Bilyonaryo, Samaniego denied allegations that he ordered the hacking of government and bank websites to boost his social media reach. He stated he did not need to compromise the Armed Forces of the Philippines’ website for content.

“He (the suspect) claimed I asked him to hack AFP so I can have content, but I can’t write about it because we have an AFP beat reporter. There is a hole in his allegation,” Samaniego said in Filipino.

According to the NBI, the arrests followed reports of multiple unauthorized access attempts and breaches. The NBI tracked the hackers’ movements and monitored their activities on social media, forums and public databases to establish patterns and connections.

Initial contact with the suspects was made on June 14 through an informant. The hackers sent a compressed file containing a database on June 17 and hacked Facebook accounts on June 19, leading to their arrest.

The NBI revealed that one of the suspects’ phone contained scripts and databases obtained from local government units, various government websites and Facebook users’ credentials. ?The phone also contained data related to at least five banks.

The suspects admitted their activities during the inquest proceedings, Lotoc said.?The suspects were taken to the NBI-Cybercrime Division for processing and are recommended to be charged with Illegal Access and Misuse of Devices under Republic Act 10175, the Cybercrime Prevention Act of 2012 and Unauthorized Access and Intentional Breach under Section