Deep Web Konek
Philippine-based cybersecurity advocacy group
- 3 min read
- 4 chapters
Related on Lably
Through Computer security and Internet safety
Deep Web Konek began in 2014 as a small online circle of Filipinos who shared an interest in the deep web. What started as an informal group trading notes about the more obscure parts of the internet gradually evolved as major cybersecurity incidents in the country drew public attention, including the Medusa ransomware attack on the Philippine Health Insurance Corporation (PhilHealth).
The group has since tried to push back against the idea that all "hackers" are involved in illegal activity, noting that many work to safeguard systems and identify weaknesses before they can be exploited. Although Deep Web Konek does not carry out hacking itself, it takes on an advocacy role by studying potential threats, using different software tools to review vulnerabilities, and preparing assessments that organizations can use to strengthen their security measures. The group says it shares cybersecurity information through its online platforms, which feature articles, webinars, and interactive forums.
Background
Deep Web Konek was founded in 2023 but key members originated around 2014 as part of a network of Filipino Deep Web Community. While it initially began as a community interested in the hidden web, the group gradually shifted its focus toward documenting vulnerabilities and data leaks affecting Philippine organizations. It later established a media arm called Kukublan Philippines, which serves as a platform for publishing reports and analysis related to cybersecurity.
Sign in to keep reading
3 more chapters are free with a Lably account.
Activities
The group's work centres on threat monitoring and the publication of reports about suspected breaches. Sometime in early 2025, the group began reporting about OSAEC and other cybercrimes. Its findings are often cited by news outlets, which in some cases lead to institutional inquiries or public statements from the organizations involved. Deep Web Konek also promotes public awareness of internet safety, emphasizing the importance of cyber hygiene among Filipino internet users.
Notable reports
In March 2024, Deep Web Konek reported that a third-party vendor of Acer Philippines had suffered a breach that exposed employee information. In July 2024, the group disclosed the alleged sale of Department of Foreign Affairs (DFA) email data on the dark web. The following month, it claimed that more than 13,000 legal and case records of the Supreme Court of the Philippines were compromised, although the court denied any such breach and asserted that its systems remained secure. Later in August 2024, the group also reported a "massive data breach" allegedly involving millions of records from the National Bureau of Investigation (NBI). The NBI responded that its internal systems were unaffected and dismissed the claim.
On September 21, 2025, the website of the Department of Public Works and Highways (DPWH) was defaced during nationwide protests over alleged corruption in the flood control funds. According to Deep Web Konek, the attack was carried out by a group calling itself the "Darkframe Cyber Alliance" and exploited a cross-site scripting (XSS) vulnerability rather than a full site takeover.
Reception
Deep Web Konek has been credited with raising public awareness of cybersecurity issues in the Philippines. At the same time, some of its reports have been disputed by government institutions, resulting in debates about the verification of breach claims. The Daily Tribune have noted that while the group's disclosures often prompt official investigations, the difficulty of confirming dark web activity means that some of its findings should be treated with caution.