Thailand strengthens cybersecurity defences among 1.5 million servers to combat Cambodian hackers

Thailand ramps up cybersecurity among 1.5 million servers under constant monitoring, following attempts by Cambodian hackers to disrupt systems.

Cyber warfare between Thailand and Cambodia continues, with the National Cyber Security Agency (NCSA) enhancing its vigilance against cyber threats. In response to attempts by Cambodian hackers to disrupt Thai systems, Thailand’s Computer Emergency Response Team (ThaiCERT) is monitoring 1.5 million servers nationwide, operating 24/7.



Air Vice Marshal Amorn Chomchey, Secretary-General of the NCSA, revealed that Thailand has seen a decrease in cyberattacks, particularly those using DDoS (Distributed Denial of Service) techniques, which typically crash websites. While the attacks have diminished in effectiveness, Thai agencies remain on high alert, with many of these attacks aiming to alter websites and falsely claim success on social media.

Despite the reduction in cyber threats, ThaiCERT continues its monitoring efforts, focusing on cooperation with 30 key government agencies to stay updated and forecast potential risks. In the event of an attack, the agency can now mitigate the incident within 5 minutes using advanced legal tools, such as Sections 52 and 58 of the Cybersecurity Act.Over the past two months, ThaiCERT recorded over 500 cyberattack attempts, with DDoS attacks amounting to 1 million instances and 500,000 unsuccessful attempts to breach systems. Fortunately, most of these attacks were thwarted due to vigilant monitoring and the use of advanced cybersecurity technologies.

“The attempts by hackers aren’t isolated; they are often repeated multiple times, with thousands of attempts by a single hacker,” Amorn said. He further added that personal data breaches are often exploited by hackers to falsely claim they’ve breached systems, although the success rate remains extremely low.
Thai cyber warriors clash with Cambodian hackers

According to recent reports from Personar Thailand, the KH Nightmare group managed to hack into several prominent targets in Cambodia, including Apple IDs, digital wallets, Facebook accounts, and cryptocurrency portfolios. The group, which was formed just two days ago, has been highly effective in its operations, consistently infiltrating Cambodian systems.

On July 27, the group claimed responsibility for successfully hacking into 47 Cambodian government agencies, including the Ministry of Foreign Affairs and other key institutions, and extracting 800 GB of data. Additionally, on July 28, KH Nightmare released two files, which reportedly contained 235 website domains, 4,570 user account credentials, including usernames and passwords, and information on the industries linked to the targeted websites, such as government, education, and private sectors.

Meanwhile, on July 29, another Thai hacker group, “Thai Is God”, launched a large-scale DDoS attack on Cambodian banks, causing significant disruptions to online services. During the crisis, the hackers managed to steal crucial files, including user lists, transaction histories, and identity documents from the banks’ databases.

Sources within the cybersecurity community revealed that for the past two months, Cambodian hackers had been persistently targeting Thai systems, especially after Thailand’s crackdown on call centre gangs. However, the cyber warfare between Thailand and Cambodia escalated following a military clash on the Thai-Cambodian border on July 24, 2025, with Cambodian hacker groups National Defensive Cambodia and Dark Storm Team claiming responsibility for launching DDoS attacks and hacking several Thai government websites.

In retaliation, Thailand’s cyber warriors, including the “BlackEye-Thai” group, initiated counterattacks, not just with DDoS attacks, but also by breaching Cambodian government websites and extracting sensitive data. The Thai hackers even uncovered the identity of the NXBBSEC group, which had previously claimed responsibility for hacking Thai government agencies in recent months. This revelation has caused considerable alarm among Cambodian hackers.

Following the border clash on July 24, several ad-hoc hacker groups in Thailand, including “Thai Is God”, T.R.A.N.C.E, Black Iron, and “KH Nightmare”, have come together in solidarity, escalating the cyber conflict between the two nations.

(2025/08/01-00:00)