PH ranks 5th among targets of China-linked cyber operations – Microsoft

• Photo from Pixabay

The Philippines ranked fifth worldwide among countries targeted by China-linked cyber operations, according to Microsoft’s Digital Defense Report 2026.

The country accounted for 2 percent of observed cyber activity attributed by Microsoft to Chinese state-sponsored threat actors between July 2025 and June 2026.

The United States topped the list with 27 percent, followed by Taiwan at 24 percent, Japan at 20 percent and Hong Kong at 3 percent.

The Philippines also ranked 10th among countries targeted by North Korean state-linked cyber operations and 12th globally in overall observed cyber threat activity.

Microsoft reported that Chinese threat actors primarily focused on intelligence gathering, targeting government institutions, information technology companies, research organizations and other sectors holding sensitive information.

“The goals of Chinese state actors remain largely consistent over time and center on long-term access to facilitate espionage,” Microsoft said in its report.

The company identified several techniques employed by Chinese cyber groups, including exploiting vulnerabilities in publicly accessible systems, deploying malicious software and gaining unauthorized access to computer networks.

Microsoft also observed a shift toward identity-based attacks, cloud-based persistence and data theft, with some threat actors experimenting with artificial intelligence to identify vulnerabilities and improve their operations.

Are the attacks really state-sponsored?

Microsoft classifies the identified threat actors as state-sponsored based on its cybersecurity intelligence and analysis of their operations, techniques and targeting patterns.

However, the classification represents Microsoft’s intelligence assessment and does not independently establish that the Chinese government directly ordered every identified operation.

The rankings also reflect observed cyber targeting rather than the number of confirmed successful intrusions.

Philippine government systems at risk

The findings come amid growing cybersecurity concerns involving China-linked threat actors and continuing tensions over the West Philippine Sea.

Microsoft’s report also found that government agencies and services accounted for 27 percent of observed global cyber threat activity in 2026, compared with 17 percent in the previous year.

The findings highlight the growing cybersecurity risks facing Philippine government agencies, particularly those handling sensitive information, national security, diplomatic affairs and critical infrastructure.