MANILA — According to tech giant Microsoft, the Philippines has climbed to the fifth-most targeted country globally by Chinese state-sponsored cyber operations amidst escalating geopolitical tensions.
In its recently released Microsoft Digital Defense Report 2026, the company outlined global digital threats and state-backed hacking campaigns originating from countries like China, Iran, North Korea, and Russia.
Beyond its standing against Chinese actors, the Philippines also secured the 10th spot for North Korean cyber targeting and ranked 12th globally among nations facing the most frequent cyber threats overall.
Microsoft noted that Chinese state-backed groups concentrate primarily on large-scale information collection to align with national strategic priorities.
“This supports their government’s international objectives and whole-of-state intelligence fusion, an approach that combines political oversight, military apparatus, and commercial industries into a single party-led apparatus,” the report stated.
The analysis added that “the goals of Chinese state actors remain largely consistent over time and center on long-term access to facilitate espionage.”
Globally, the United States suffered the highest volume of Chinese cyber targeting at 27%, trailed closely by Taiwan at 24% and Japan at 20%. Hong Kong registered 3%, while the Philippines accounted for 2% to round out the top five, sharing percentages with Malaysia, Italy, and the United Kingdom, whereas Germany and Belgium each accounted for 1%.
To achieve their objectives, threat actors have historically leveraged vulnerabilities in public-facing applications, malicious script uploads, web shells, and remote access trojans. Nevertheless, Microsoft observed a tactical evolution toward identity-driven breaches, data exfiltration, and cloud-native persistence techniques.
Primary targets for these operations span information technology, government institutions, research entities, think tanks, non-governmental organizations, critical manufacturing, transportation, consumer retail, finance, defense, and public health sectors.
Furthermore, Microsoft highlighted that artificial intelligence has accelerated these malicious capabilities.
“Chinese state actors experiment with new technologies as they gain adoption, fitting them into existing workflows. Some actors now use AI tools to search for vulnerabilities or tips on exploiting them,” the report said.
Domestically, the Armed Forces of the Philippines (AFP) previously issued warnings regarding heightened Chinese cyber activity throughout 2026 as maritime tensions continue to mount over the West Philippine Sea.