Cyber Incident Victim: Ministry of Communications and Information Technology
Date:
Dec 2016
Location:
Thailand
Summary
Hackers associated with Anonymous conducted DDoS attacks against Thai government websites, including the defense ministry and digital economy agency, in retaliation for restrictive internet legislation enabling state surveillance and censorship without judicial oversight. The attacks caused temporary outages and involved data theft, though officials claimed minimal disruption while warning of potential risks to critical infrastructure; privacy advocates and international organizations condemned the law as threatening online freedoms and human rights.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 2 motives | 2 techniques |
| Threat Actors | Type | Location |
|---|---|---|
| 2 actors | Available to members | Available to members |
Description
On December 16, 2016, hackers affiliated with Anonymous launched distributed denial-of-service (DDoS) attacks against multiple Thai government websites in response to the passage of a controversial internet bill. The attacks targeted Thailand's defence ministry website, rendering it inaccessible, and also affected the Ministry of Digital Economy and Society, the Prime Minister's Office, and the Office of the National Security Council. These cyber operations coincided with the military-appointed legislature's unanimous approval of amendments to Thailand's computer crime law that same day. The legislative changes granted authorities expanded powers to monitor private communications and censor online content without judicial oversight. During the attacks, a participant claiming affiliation with Anonymous publicly shared screenshots of documents allegedly stolen from compromised government systems via Twitter.
Thai defence officials acknowledged the DDoS incidents but minimized their operational impact, stating their systems were prepared for such events. Government representatives characterized the attackers as 'thugs' attempting to create chaos and encouraged public cooperation in identifying perpetrators. Officials warned that subsequent attacks could potentially disrupt critical infrastructure systems, including financial networks and transportation services. Concurrently, privacy advocates including Amnesty International and the Thai Netizen Network petitioned against the new legislation, arguing its provisions enabled excessive state surveillance that threatened digital rights. The United Nations Office of Human Rights separately expressed concerns about the law's potential to violate online freedoms. Prime Minister Prayuth Chan-ocha publicly defended the legislation as necessary for combating harmful internet content, despite criticism that its broad monitoring authorities risked human rights violations. The cyber attacks represented both immediate technical disruptions and a broader confrontation over digital governance policies.