Hackers Hijack Digital Billboards in Multiple Countries, Broadcast Explicit Videos

According to an interview published by The Cairo Report, a representative of the group said members discovered thousands of exposed systems during the two-hour search. The attackers claimed they exploited weaknesses in remote advertising management software rather than physically accessing individual billboards.

However, the reported number of vulnerable systems and the precise technical method have not been independently verified.

The most prominent incident occurred along the 26th of July Axis in Giza, Egypt, where a large digital billboard displayed explicit footage instead of its usual advertisements. Videos circulating online showed motorists recording the incident, with the screen displaying aliases associated with the hacking group.

Egypt's Interior Ministry confirmed that an international company contracted by the local advertising operator had suffered a cyberattack. According to the ministry, the incident resulted in unauthorised footage appearing on digital advertising screens in several countries simultaneously. Authorities said legal proceedings had been initiated.

Al Arabia United, the company operating the affected Egyptian billboard, also acknowledged unauthorised access and said it had switched off the screen while investigations continued.

In Malaysia, the Kluang Municipal Council confirmed that several public LED screens had been compromised and displayed obscene material. Authorities subsequently shut down the affected displays and began investigations with the service provider.

In Brazil, an advertising screen in Campo Maior, Piauí, also displayed sexually explicit content. Its operator confirmed a cyberattack, suspended the display and reported the incident to police.

The group additionally claimed to have accessed systems in Iraq and China, although those claims have not received the same level of independent confirmation.

Cybersecurity researchers at Malwarebytes said the incidents highlight the risks associated with internet-connected advertising infrastructure, particularly inadequate protection of remote-management systems.

Investigations into the incidents are continuing.