Hacktivist at War: The Cambodia-Thailand Cyber Escalation July-August 2025
← Research Hub

Hacktivist at War: The Cambodia-Thailand Cyber Escalation July-August 2025

Hacktivist cyber attacks often rise in parallel when conflict between nations arise. Understand the common tactics, techniques and procedures that hacktivists use to target their victims, and how to protect yourself from such attacks.

Background

Between July 24 and August 7, Group-IB Threat Intelligence observed 139 cyberattacks linked to 19 hacktivist groups — 11 pro-Cambodian and 8 pro-Thai.

Attack frequency rose by 241% compared to pre-conflict levels, with Cambodian groups targeting Thai government, education, and healthcare sectors, while Thai groups retaliated against Cambodian government, banking, and education systems.

This report provides an overview of the hacktivist activity, the actors involved, and actionable recommendations for organizations to defend against ongoing cyber threats stemming from the conflict.

In this report

Group-IB Threat Intelligence: Access the unique and comprehensive profiles of the hacktivist groups behind the attacks.Group-IB Threat Intelligence: Access the unique and comprehensive profiles of the hacktivist groups behind the attacks.

Distributed Denial of Service (DDoS) attack: Learn how to stay updated on hacktivist groups’ tactics, techniques and procedures (TTPs), upcoming campaign attacks and IP infrastructure.Distributed Denial of Service (DDoS) attack: Learn how to stay updated on hacktivist groups’ tactics, techniques and procedures (TTPs), upcoming campaign attacks and IP infrastructure.

Website defacement attack: Understand how to prevent or restore your website quickly after a defacement attack.Website defacement attack: Understand how to prevent or restore your website quickly after a defacement attack.

Data leaks: How you can protect your corporate credentials and employee access from being leaked.Data leaks: How you can protect your corporate credentials and employee access from being leaked.

Advanced protection against cyber threats

Group-IB’s security ecosystem provides comprehensive protection for your IT infrastructure based on our unique cyber intelligence and deep analysis of attacks and incident response.