Hackers Hijack Digital Billboards in Egypt, Malaysia and Brazil

Digital billboards in Egypt, Malaysia and Brazil were hijacked by hackers last week, with regular advertisements replaced by pornographic videos on public LED screens. The incidents exposed potential security weaknesses in remotely managed advertising systems, while the group claiming responsibility mocked companies for failing to protect their internet-connected displays.

A hacking group operating a Telegram channel called Leakers$ claimed it took around two hours to identify thousands of vulnerable systems. The group said it exploited weaknesses in the software used to remotely transmit content to digital billboards, allowing it to replace advertisements without physically accessing the screens.

Similar incidents were also claimed in Iraq and China, although the full extent of the alleged attacks has not been independently established.

Cairo Highway Billboard Displays Explicit Videos

One of the most prominent incidents took place on a large digital billboard overlooking the 26th of July Axis, one of Cairo’s busiest highways in Egypt. The screen reportedly displayed pornographic footage instead of its scheduled advertisements, attracting the attention of passing motorists.

Videos shared on social media showed several drivers stopping to record the incident. The footage also displayed messages identifying the alleged hacking group, including the words “Leaked by: Ch, 19ylegal never and nivex” and the Telegram handle @LeakersGov, CNN reported.

Egypt’s Interior Ministry said the billboard belonged to an advertising company that had a contract with an international firm. According to the ministry, the international company’s website had been targeted in a cyberattack, resulting in unauthorised footage being broadcast simultaneously in several countries.

The ministry did not identify the international company or provide a complete list of affected countries. It confirmed that legal proceedings had been initiated following the incident.

Advertising Company Switches Off Hacked Screen

Al Arabia United, the advertising company associated with the Cairo billboard, said an unknown party had gained unauthorised access to one of its digital screens.

The company switched off the affected display as a precaution and began investigating the incident in coordination with the authorities. The response was intended to prevent further unauthorised content from appearing while the investigation continued.

Malaysia and Brazil Also Report Billboard Hacks

The incidents were not limited to Egypt. Similar cases were reported in Malaysia and Brazil, where public digital advertising screens also displayed obscene or explicit content.

Malaysia: Public LED Screens in Johor Affected

In Malaysia, Kluang Municipal Council confirmed that several public LED screens in the Johor region had displayed obscene material. The council switched off the affected screens after discovering the unauthorised content.

Police also opened investigations into the incident to determine how the displays were accessed and who was responsible.

Brazil: Billboard Near BR-343 Highway Targeted

In Brazil, an LED advertising panel near the BR-343 highway in Campo Maior, Piauí, also displayed explicit footage.

The operator, Ferreira & Ferreira Publicidade e Comunicação, confirmed that its equipment had been targeted in a cyberattack. It shut down the affected display and filed a police complaint.

The incidents across different countries have raised concerns about the security of digital advertising infrastructure, particularly systems that allow operators to update screen content remotely.

Who Hacked the Digital Billboards?

A group operating the Telegram channel Leakers$ claimed responsibility for the attacks. The group said it had identified thousands of vulnerable systems in approximately two hours and claimed to have accessed digital billboards in Egypt, Malaysia, Brazil, Iraq and China.

However, the group’s claims about the number of vulnerable systems and the full geographical reach of the attacks have not been independently verified.

The group used the incidents to draw attention to what it described as poor security practices among companies operating digital advertising networks.

How Did Hackers Take Control of the Billboards?

According to the group, the attacks involved weaknesses in software used to remotely transmit advertisements and other content to LED screens.

Digital billboards commonly rely on connected management systems that allow advertising companies to upload, schedule and change content without visiting each display physically. If these systems are not properly secured, attackers may be able to gain unauthorised access and alter what appears on the screens.

Leakers$ claimed that some of the systems it accessed had weak security protections, making it relatively easy to replace scheduled advertisements with its own videos.

The alleged method highlights a broader Cybersecurity risk: an internet-connected display can become a public target if the software and infrastructure controlling it are not adequately protected.

Hackers Mock Advertising Companies Over Weak Security

The group openly mocked the security measures used by advertising companies. Describing the alleged attack as extremely simple, it said the process could be completed by “anyone with two brain cells”.

It also criticised companies for spending millions on advertising infrastructure while allegedly failing to secure the systems connected to their digital screens.

Leakers$ claimed that it was not seeking ransom payments or donations. Instead, it said the attacks were intended to expose security weaknesses in poorly protected digital advertising networks.

These statements represent the group’s own explanation for the incidents and do not independently establish its motives.

What the Billboard Hacks Reveal About Digital Advertising Security

The incidents demonstrate how weaknesses in remotely managed systems can affect public-facing infrastructure across different countries. Digital billboards are designed to make advertising updates quick and convenient, but their internet connectivity also creates potential entry points for cyberattacks.

Advertising operators need to protect the software and networks used to manage their displays through strong access controls, secure authentication, regular software updates and continuous monitoring. Restricting access to authorised personnel and separating billboard management systems from other business networks can also reduce exposure to attacks.

Investigations in the affected countries will help establish how the attackers gained access, whether the same vulnerabilities were exploited across multiple networks and whether additional screens were compromised.

For now, the incidents have brought renewed attention to the cybersecurity risks facing digital advertising companies. What appeared to be a series of disruptive billboard displays has also highlighted the importance of securing the connected systems behind public digital infrastructure.