Thai organisations face surge in cyberattacks after border clash
Cyberattacks targeting Thai organisations have risen sharply in the wake of a border incident between Thailand and Cambodia resulting in the death of a Cambodian soldier.
A hacktivist group calling itself AnonSecKh, also known as ANON-KH or Bl4ckCyb3r, has claimed responsibility for a series of attacks against several prominent entities in Thailand. The group, communicating via Telegram channels, began its campaign on 23 March 2025, initially targeting Thai government websites before expanding its focus.
Rising activity
According to research from Radware, AnonSecKh leveraged proof-of-impact reports to validate its distributed denial of service (DDoS) attack claims. These claims have been primarily documented between 28 May and 10 June 2025, during which time the group claims 73 attacks on Thai organisations.
The majority of these attacks targeted government websites, which accounted for nearly 30% of the group's claims. Military institutions followed closely behind with almost 26%, with manufacturing (approximately 15%) and finance (more than 7%) also targeted. These attacks spanned a variety of sectors, with a focus on highly visible and essential institutions.
AnonSecKh's campaign intensified noticeably after the border incident involving Cambodian and Thai soldiers. "An incident at the border area between Thailand and Cambodia triggered a hacktivist-led cyber campaign targeting Thai organizations and institutions," Radware noted.
History of regional cyber incidents
This is not the first time the region has seen such politically-motivated cyber activity. Radware's intelligence report notes, "Cyber incidents in the region are not uncommon. In the past, politically motivated Cambodian hacktivist groups, such as ANONSECKH, H3C4KEDZ, and NXBBSEC, have launched attacks in response to rising border tensions or nationalistic disputes."
AnonSecKh first drew attention by attacking Thai government portals in March. By the end of that month, the group claimed responsibility for attacks on a wide range of government, academic and commercial websites. Activity slowed in April, but by late April, AnonSecKh had expanded its efforts to include financial institutions in Vietnam.
Escalation after border incident
A significant escalation occurred after the border incident on 28 May. Radware highlights that "Between May 1 and May 27, only 20 attack claims targeting Thailand were observed, but between May 28 and June 10, the number of claimed attacks jumped to a staggering 64."
Early June saw a temporary drop in activity. According to Radware, "In early June, there was a brief slowdown with only a few isolated incidents. However, following the strong public statement from the Thai military on June 6, AnonSecKh resumed and scaled up its attacks, continuing its campaign against Thai institutions and showing no intention of slowing down at the time of writing."
Motivation and implications
AnonSecKh's operations appear to be politically motivated, typically focusing on countries perceived as harming Cambodia. The group's attack patterns have been closely tied to real-world events at the Thailand-Cambodia border, reflecting a form of digital retaliation. "AnonSecKh's activity highlights several key risks. First, their attacks are tightly linked to political incidents and demonstrate a reactive pattern. This suggests that even isolated or symbolic events can trigger immediate cyber responses. Second, the group has shown the ability to launch rapid and intense attack waves. The sharp jump in volume following key events reflects a high level of coordination and intent. Finally, the choice of targets such as government resources, universities and financial institutions raises concerns about potential real-world disruptions. These attacks aren't just aimed at making a statement, they are an attempt at damaging public trust and interfering with essential services."
Radware's analysis indicates that the situation remains dynamic, with AnonSecKh continuing to target Thai organisations, particularly following any developments related to regional disputes or public statements from government or military officials.
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Scoop
2 days ago
- Scoop
Protect Women Domestic Violence Survivors, Refugees, And Human Rights Defenders
Bangkok, June 19, 2025 U.N. committee to assess government record on women's rights The Government of Thailand should commit to ensuring the protection of women domestic violence survivors, refugees, and human rights defenders, Fortify Rights said today. The U.N. Committee on the Elimination of Discrimination against Women (CEDAW Committee) will consider Thailand's record on women's rights during a public hearing later today in Geneva, Switzerland. 'While Thailand has made progress on women's rights, substantial areas still need reform,' said Patrick Phongsathorn, Senior Advocate at Fortify Rights. 'Survivors of domestic violence continue to be underserved by Thai authorities, while women refugees and human rights defenders suffer from a lack of comprehensive legal protection.' Ahead of Thailand's review, Fortify Rights made an official submission to the CEDAW Committee, making recommendations on the rights of domestic violence survivors, refugees, and human rights defenders. In its submission, FortifyRights stated that progress on women's rights in Thailand 'has too often been characterized by weak enforcement and poor implementation of relevant laws and policies, further compounding the vulnerability of survivors of abuse.' Fortify Rights's submission includes research conducted over multiple years with women survivors of human rights abuses in Thailand, including a recent 46-page report that documents significant failings in Thailand's response to domestic violence. The report draws on more than 50 interviews, including with 32 women survivors of domestic violence, finding that Thailand's domestic violence legal framework and law enforcement mechanisms fail to provide adequate protections for survivors of domestic violence. The report also highlights that while a new draft domestic violence law, which was recently 'approved in principle' by the Thai Cabinet, expands certain protections for domestic violence survivors, it retains problematic provisions, including a six-month statute of limitations that risks excluding child survivors. In its submission to the CEDAW Committee, Fortify Rights recommended that the Thai government ensure that any changes to the domestic violence law align with international standards, that official responses to domestic violence are well-coordinated across all the relevant agencies and stakeholders, and that officials dealing with domestic violence cases are regularly trained in survivor-centered approaches as well as proper legal and procedural handling of cases. In its report to the committee, the Thai government stated that it 'aids refugees and asylum-seekers in accordance with human rights principles.' Several years of investigations by Fortify Rights have found, however, that refugee women, especially those escaping violence and persecution in neighboring Myanmar, have been subjected to various abuses at the hands of Thai authorities. Without an effective legal framework to recognize and protect refugees in Thailand, refugees face criminal penalties under Thailand's 1979 Immigration Act, which prohibits unauthorized entry or stay in Thailand. Thailand is not party to the 1951 U.N. Refugee Convention and does not formally recognize refugee status as defined by the Convention. As a result, refugees in Thailand are subject to arbitrary arrest, detention, and extortion, as well as forced returns. A lack of legal status in Thailand also means that refugees face considerable barriers when trying to access basic public services, including healthcare. Fortify Rights recommended to the CEDAW Committee that Thailand should ratify the U.N. Refugee Convention and end abusive practices, including arbitrary arrests, detention, and forced return of women refugees, especially those fleeing violence and persecution in neighboring Myanmar. Fortify Rights also recommended that Thailand ensure the broadest possible coverage of protective legal status and access to basic public services, including healthcare, for women refugees in Thailand. Women human rights defenders in Thailand continue to be subjected to judicial harassment, including through instances of Strategic Litigation Against Public Participation or SLAPP suits. According to a recent U.N. study, between 1997 and 2022, more than 400 people, including many women human rights defenders, were targeted by 109 instances of SLAPP suits in Thailand. In 2018, Thailand amended its Criminal Procedure Code, allowing judges to dismiss and forbid the refiling of a complaint by a private individual if the complaint is filed 'in bad faith or with misrepresentation of facts to harass or take advantage of a defendant' this amendment has, however, been under-utilized by the courts. In its submission to the CEDAW Committee, Fortify Rights recommended that Thailand bring its legal framework in line with international law and standards by decriminalizing defamation and treating it as a civil matter between individuals. Fortify Rights also recommended that judges and lawyers be trained and provided with guidelines to ensure the proper implementation of legal measures to prevent judicial harassment of women human rights defenders. 'In many ways, Thailand stands at a crossroads on women's rights—there have been advancements, but there are still major gaps to be filled,' said Patrick Phongsathorn. 'In its review, the CEDAW Committee must press the Thai government to do all it can to guarantee the rights of all women in Thailand.'
Techday NZ
4 days ago
- Techday NZ
Thai organisations face surge in cyberattacks after border clash
Cyberattacks targeting Thai organisations have risen sharply in the wake of a border incident between Thailand and Cambodia resulting in the death of a Cambodian soldier. A hacktivist group calling itself AnonSecKh, also known as ANON-KH or Bl4ckCyb3r, has claimed responsibility for a series of attacks against several prominent entities in Thailand. The group, communicating via Telegram channels, began its campaign on 23 March 2025, initially targeting Thai government websites before expanding its focus. Rising activity According to research from Radware, AnonSecKh leveraged proof-of-impact reports to validate its distributed denial of service (DDoS) attack claims. These claims have been primarily documented between 28 May and 10 June 2025, during which time the group claims 73 attacks on Thai organisations. The majority of these attacks targeted government websites, which accounted for nearly 30% of the group's claims. Military institutions followed closely behind with almost 26%, with manufacturing (approximately 15%) and finance (more than 7%) also targeted. These attacks spanned a variety of sectors, with a focus on highly visible and essential institutions. AnonSecKh's campaign intensified noticeably after the border incident involving Cambodian and Thai soldiers. "An incident at the border area between Thailand and Cambodia triggered a hacktivist-led cyber campaign targeting Thai organizations and institutions," Radware noted. History of regional cyber incidents This is not the first time the region has seen such politically-motivated cyber activity. Radware's intelligence report notes, "Cyber incidents in the region are not uncommon. In the past, politically motivated Cambodian hacktivist groups, such as ANONSECKH, H3C4KEDZ, and NXBBSEC, have launched attacks in response to rising border tensions or nationalistic disputes." AnonSecKh first drew attention by attacking Thai government portals in March. By the end of that month, the group claimed responsibility for attacks on a wide range of government, academic and commercial websites. Activity slowed in April, but by late April, AnonSecKh had expanded its efforts to include financial institutions in Vietnam. Escalation after border incident A significant escalation occurred after the border incident on 28 May. Radware highlights that "Between May 1 and May 27, only 20 attack claims targeting Thailand were observed, but between May 28 and June 10, the number of claimed attacks jumped to a staggering 64." Early June saw a temporary drop in activity. According to Radware, "In early June, there was a brief slowdown with only a few isolated incidents. However, following the strong public statement from the Thai military on June 6, AnonSecKh resumed and scaled up its attacks, continuing its campaign against Thai institutions and showing no intention of slowing down at the time of writing." Motivation and implications AnonSecKh's operations appear to be politically motivated, typically focusing on countries perceived as harming Cambodia. The group's attack patterns have been closely tied to real-world events at the Thailand-Cambodia border, reflecting a form of digital retaliation. "AnonSecKh's activity highlights several key risks. First, their attacks are tightly linked to political incidents and demonstrate a reactive pattern. This suggests that even isolated or symbolic events can trigger immediate cyber responses. Second, the group has shown the ability to launch rapid and intense attack waves. The sharp jump in volume following key events reflects a high level of coordination and intent. Finally, the choice of targets such as government resources, universities and financial institutions raises concerns about potential real-world disruptions. These attacks aren't just aimed at making a statement, they are an attempt at damaging public trust and interfering with essential services." Radware's analysis indicates that the situation remains dynamic, with AnonSecKh continuing to target Thai organisations, particularly following any developments related to regional disputes or public statements from government or military officials.
1News
08-06-2025
- 1News
Israel retrieves body of Thai hostage as 95 reported killed in Gaza
Israel says it has retrieved the body of a Thai hostage abducted into the Gaza Strip during the Hamas-led attack that sparked the war, as Israel's military continued its offensive, killing at least 95 people in the past 24 hours, according to Gaza's health ministry. Nattapong Pinta had come to Israel to work in agriculture. Israel's government said he was seized from Kibbutz Nir Oz and killed early in the war, which began on October 7, 2023. Thailand's foreign ministry said the bodies of two other citizens were yet to be retrieved. Thais were the largest group of foreigners held captive. Many lived on the outskirts of southern Israeli kibbutzim and towns, the first places overrun in the attack. Forty-six Thais have been killed during the war, according to the foreign ministry. Israel's defence minister said Pinta's body was retrieved from the Rafah area in southern Gaza. The army said he was seized by the Mujahideen Brigades, the small armed group that also took two Israeli-American hostages, Judih Weinstein and Gad Haggai, whose bodies were retrieved on Thursday. ADVERTISEMENT Israel's military later said it killed the head of the Mujahideen Brigades, As'ad Aby Sharaiya, in Gaza City on Saturday. Fifty-five hostages remain in Gaza. Israel says more than half are dead. Families rallied again Saturday evening in Israel, calling for a ceasefire deal to bring everyone home. Hamas issued an unusual warning about another hostage, Matan Zangauker, saying Israel's military had surrounded the area where he's held and that any harm that came to him during a rescue attempt would be Israel's responsibility. Israel's military didn't immediately comment. 'The decision to expand the (military) ground manoeuvre is at the cost of Matan's life and the lives of all the hostages,' Zangauker's mother, Einav, told the rally in Tel Aviv. Israel continues its military offensive A strike in Gaza City killed six members of a family, including two children, according to the Shifa and al-Ahli hospitals. Israel's military said the strike targeted the Mujahideen Brigades leader. Displaced Palestinians carrying their belongings in Rafah, southern Gaza Strip on Saturday, June 7, 2025. (Source: Associated Press) ADVERTISEMENT 'This is the real destruction,' a man said as he carried the body of a small boy from the scene. Four Israeli strikes hit the Muwasi area in southern Gaza between Rafah and Khan Younis. In northern Gaza, a strike hit an apartment, killing seven people, including a mother and five children. Their bodies were taken to Shifa hospital. 'Stand up, my love,' one weeping woman said, touching the shrouded bodies. Israel said it was responding to Hamas' 'barbaric attacks' and dismantling its capabilities. It said it takes all feasible precautions to mitigate civilian harm. Reports say some of the dead tried to get food aid Staff at Nasser hospital, which received the bodies of six people over the past 24 hours, said they were killed while on their way to get food aid. Much of Gaza's population of over 2 million relies on aid after widespread destruction of agriculture as well as a recent Israeli blockade. Experts have warned of famine. ADVERTISEMENT Israel's army has warned that the aid distribution area is an active combat zone during nighttime hours. It said several suspects attempted to approach troops operating in the Tel al-Sultan area overnight 'in a manner that posed a threat." The army said troops called out, then fired warning shots as the suspects advanced. An army official who couldn't be named in line with military procedures said the shots were fired about a kilometre from the distribution site. Over the past two weeks, shootings have occurred frequently near the new hubs where thousands of desperate Palestinians are being directed to collect food. Witnesses say nearby Israeli troops have opened fire, and more than 80 people have been killed, according to Gaza hospital officials. Israel's military has said it fired warning shots or, in some instances, at individuals approaching. The hubs are run by the Gaza Humanitarian Foundation, a new group of mainly American contractors. Israel wants it to replace a system coordinated by the United Nations and aid groups. A GHF spokesperson, speaking on condition of anonymity in accordance with the group's rules, said it didn't feed Gaza residents on Saturday and blamed Hamas threats. There was no immediate Hamas response. Israel accuses Hamas of siphoning off aid under the UN-led system. ADVERTISEMENT The UN and aid groups deny there's significant diversion of aid to militants and say the new system — which they have rejected — allows Israel to use food as a weapon, violates humanitarian principles and won't be effective. The UN says it has been unable to distribute much aid under its system because of Israeli military restrictions on movements and insecurity. Separately, Palestinians lined up at a soup kitchen in Gaza City for handouts on the second day of Eid al-Adha. 'I have been standing here for more than an hour and a half. I feel I have a sunstroke, and I am in need,' said Farida al-Sayed, who said she had six people to feed. 'I only had lentils, and I ran out of them.' Death tolls since the war began Hamas-led militants killed around 1200 people, mostly civilians, in the October 7 attack and abducted 251 hostages. Most were released in ceasefire agreements or other deals. Israeli forces have rescued eight living hostages and recovered dozens of bodies. Israel's military campaign has killed more than 54,000 Palestinians, mostly women and children, according to Gaza's health ministry, which doesn't distinguish between civilians and combatants. The offensive has destroyed large parts of Hamas-run Gaza and displaced around 90% of its population of roughly 2 million Palestinians.
