Ethical Hacking News
A recent series of hacks targeting digital billboards in multiple countries has highlighted a vulnerability in the software used to transmit content to LED displays. The attackers, who claimed responsibility for the operation, exploited a simple yet overlooked security weakness in the system, leaving countless digital billboards broadcasting obscene content. The incident serves as a reminder of the ongoing issue of digital billboard security and the importance of basic security measures in protecting these systems.
Billboards in multiple countries, including Egypt, Malaysia, Brazil, and potentially Iraq and China, were hacked due to a vulnerability in the software used to transmit content to LED displays. The attackers exploited a simple yet overlooked security weakness in the system, leaving countless billboards broadcasting obscene content. The attackers used an automated random scan to identify thousands of exposed systems via web pages and interfaces that lacked basic security protections. The group stated that companies often prioritize infrastructure development over security, leaving LED screens and advertising networks connected to the internet without basic protection. The hacks were carried out by a group claiming to be exposing vulnerabilities to prove that anyone can take control of screens across a country in real time. The incidents highlight the ongoing issue of digital billboard security and the importance of basic security measures in protecting these systems.
The recent incidents of hacked billboards in multiple countries, including Egypt, Malaysia, Brazil, and potentially Iraq and China, have shed light on a vulnerability in the software used to transmit content to LED displays. The attackers, who have claimed responsibility for the operation, exploited a simple yet overlooked security weakness in the system, leaving countless digital billboards broadcasting obscene content.
According to the attackers, they used an automated random scan to identify thousands of exposed systems via web pages and interfaces that lacked basic security protections. The attackers then gained access to display systems in several countries, not just Egypt, but also Malaysia, Brazil, China, and others. The group stated that "companies charge millions to build infrastructure across countries, yet leave LED screens and advertising networks connected to the internet without even basic protection."
In Egypt, a massive digital billboard on one of Cairo's busiest highways was hacked to display pornographic footage, shocking drivers and prompting motorists to stop and record the scene. The Cairo Report identified Al Arabia United as an Egyptian-Saudi joint venture established in 2022 by United Media Services, which controls more than 40 companies. The venture operates roughly 1,926 billboards, including 239 digital ones, in Cairo, Giza, Alexandria, and the North Coast.
In Malaysia, several public LED screens in Kluang, Johor, were hacked to show obscene content. In response, the Kluang Municipal Council shut down all affected screens. In Campo Maior, Piauí, Brazil, an LED panel on an avenue near the BR-343 displayed pornographic content. The company Ferreira & Ferreira Publicidade e Comunicação confirmed a cyberattack, shut down the equipment immediately, filed a police report, and apologized to the public.
The group behind the cyberattack also claimed access in Iraq and China, but independent confirmation for those locations is thinner than for the aforementioned locations. The attackers stated that "it wasn't nearly as complex an operation as many might imagine" and that "anyone with two brain cells" could have carried out the attack.
This incident highlights the ongoing issue of digital billboard security and the importance of basic security measures in protecting these systems. The Out of Home Advertising Association of America warned in their 2024 Digital Billboard Security Guidelines, "Do not rely on default passwords from display manufacturers." The attackers exploited a vulnerability in software used to transmit content to LED displays, rather than targeting individual physical billboards.
In another case from 2019, security researcher Drew Green gained access to an internet-connected digital signage system after finding an unchanged default administrator password on its web interface, then chained additional flaws that would have allowed arbitrary content to be displayed. This case illustrates the ongoing problem of default password usage and its impact on digital billboard security.
The attackers also left a message on the Leakers$ Telegram channel, stating that "Egypt remains under a dictatorship. The government maintains its power through repression, while the country struggles to move forward. Years pass, but nothing changes and people's lives don't improve." The group claimed that they are exposing vulnerabilities to prove that "anyone can take control of screens across your country in real time" and that mainstream media overhypes such operations as sophisticated or state-sponsored when the infrastructure is simply poorly secured.
The recent incidents of hacked billboards in multiple countries serve as a reminder of the importance of digital security and the need for basic security measures to be implemented in these systems. As the attackers pointed out, "companies charge millions to build infrastructure across countries, yet leave LED screens and advertising networks connected to the internet without even basic protection."
Related Information:
https://www.ethicalhackingnews.com/articles/Hacking-the-Global-Billboard-Network-A-Vulnerability-in-the-Dark-ehn.shtml
https://gizmodo.com/billboards-in-multiple-countries-hacked-to-show-porn-2000833555
Published: Sun Nov 1 14:52:15 2026 by llama3.2 3B Q4_K_M
