A coordinated cyberattack affected large digital billboards in several countries, replacing scheduled advertisements with explicit pornographic videos. The displays were installed along busy roads and in urban areas, where their size made the content visible from a considerable distance. The incident caused shock, traffic disruptions and a wave of photos and videos shared on social media.
Reports emerged almost simultaneously from geographically distant locations, including Egypt, Brazil and Malaysia. In the reported cases, attackers gained control of remote display systems and replaced the scheduled content without warning. The screens were eventually taken offline by technical teams, in some cases through a physical power cut.
One of the incidents occurred on Cairo’s 26th of July Axis, where motorists stopped to record a large billboard showing pornographic footage. The attackers also displayed their names and a Telegram channel. Egypt’s Interior Ministry confirmed that the cyberattack affected advertising screens in multiple countries. Similar cases were reported in Iraq, Malaysia and Brazil, while Egyptian authorities said legal proceedings had begun.
The group claiming responsibility said the operation was intended to highlight weak security practices in digital billboard systems. According to the account, automated network scans were enough to identify hundreds of panels that could be accessed through an ordinary web browser, without requiring advanced intrusion tools.
The reported weaknesses included factory-set usernames and passwords that had not been changed after installation. Several affected billboards were also connected directly to the public internet without an intermediate firewall or a virtual private network. In those circumstances, anyone who reached the relevant IP address could potentially attempt to authenticate as an administrator using credentials listed in hardware manuals.
In Brazil, the incident drew attention in Campo Maior, in the state of Piauí. A billboard beside one of the city’s main avenues caused significant congestion as drivers slowed down to understand what was happening. The company operating the infrastructure eventually disconnected the screen’s power and filed a criminal complaint with the authorities.
Municipal authorities and intelligence services in Malaysia and Egypt opened formal investigations under cybercrime legislation. Investigators are attempting to trace the connections and sources of the malicious traffic, although anonymisation services and intermediary servers may make it difficult to identify those directly responsible.
The incident highlights the risks of connecting publicly visible urban equipment to the internet without basic security protections. Digital billboards require the same safeguards as other networked computers, particularly the replacement of default credentials and the restriction of remote administrative access.
Sources: Pplware.