Unspecified cybercriminals reportedly refraining from inflicting harm on digital systems
In the face of a surge in Cambodian Information Operations (IO) campaigns, Thailand has successfully withstood cyberattacks targeting its government and military digital infrastructure. The resilience of the Thai cybersecurity defenses can be attributed to a combination of robust government measures, active public participation, proactive offensive cyber operations, and continuous monitoring by specialized agencies.
Deputy Prime Minister and Minister of Digital Economy and Society, Prasert Jantararuangtong, urged the public to rely on official government sources for accurate information, reiterating the government's commitment to ensuring access to accurate and verified information. He also confirmed that no government systems have been compromised.
Thailand's robust cybersecurity measures include the monitoring and protection of approximately 1.5 million servers under constant surveillance, enabling quick detection and mitigation of cyberattacks. This proactive approach has helped to thwart DDoS attempts and hacking efforts targeting Thai government websites and digital infrastructure.
The Thai government has also mobilized citizens as "cyber warriors," encouraging them to post pro-Thai messages online multiple times per day. This wide-scale public involvement has generated over 200 million daily posts, countering divisive content and disinformation from Cambodian sources.
In addition to these measures, several Thai ad-hoc hacker groups, such as "BlackEye-Thai," have launched counter-DDoS attacks, infiltrated Cambodian government websites, and exposed the identities of Cambodian hacking groups. These proactive offensive operations have significantly deterred further Cambodian cyber aggression.
The Anti-Fake News Centre under the DES Ministry in Thailand, along with the National Cyber Security Agency, has maintained a 24-hour vigilance, closely coordinating with military and national security agencies to block fake news and protect vital systems. Despite massive volumes of attacks (over 500 million DDoS hits in 24 hours), these agencies have found no evidence of system compromise.
The tactical shift in Cambodian cyber activity, from call center scam operations to IO campaigns, has been limited in its effectiveness in destabilizing Thai information environments, thanks to Thailand’s preparedness and strategic responses. Many Cambodian call center scam operations have sharply declined, indicating a shift in focus by the Cambodian actors.
Prasert Jantararuangtong is working closely with military security agencies to monitor the situation, and the National Security Council (NSC) is being coordinated with closely. The harmful information channels used by hostile actors are being blocked, and the Anti-Fake News Centre in Thailand is particularly focusing on fake news related to border tensions between Thailand and Cambodia.
Despite the ongoing cyber threats, Thailand has not experienced any damage from recent cyberattacks originating from Cambodia. The Thai government's commitment to maintaining a secure digital environment, coupled with the active participation of its citizens, has proven to be an effective strategy in countering disinformation and protecting the country's digital infrastructure.
- Recognizing the crucial role of technology in the face of cybersecurity threats, Deputy Prime Minister Prasert Jantararuangtong emphasized the importance of relying on official government sources for accurate information, given the rise in general-news and crime-and-justice related cyberattacks.
- Leveraging cybersecurity as a tool for defense, several ad-hoc Thai hacker groups like BlackEye-Thai have launched counter-DDoS attacks, infiltrated Cambodian government websites, and exposed the identities of Cambodian hacking groups as part of broader offensive operations in the realm of technology.