Thailand cyber alert: telcos ordered to boost defences

A Thailand cyber alert at the highest level is being prepared as the government orders telecom operators to strengthen their defences against a growing threat and seeks intelligence from Apple, Google and Line, the Bangkok Post reported on Wednesday.

Deputy Minister of Digital Economy and Society Nan Boontida Somchai said attacks on Thai servers were happening all the time, and that the National Cyber Security Agency (NCSA) was monitoring and recording each incident.

Over the past two to three weeks, the ministry has held talks with the National Broadcasting and Telecommunications Commission (NBTC) and the NCSA about telecom operators and the country's communications infrastructure.

What the Thailand cyber alert asks of telcos

Operators have been told to prepare for the highest level of threat across the whole country, rather than relying on existing contingency plans, which were mainly designed for local emergencies. The ministry expects updated reports on their readiness this week.

Ms Nan said the ministry can oversee communications networks, but it cannot tell whether the traffic passing through them contains malware or spyware. For that reason, government agencies and private companies are being urged to check and reinforce their own firewalls.

She said Thai systems were still able to withstand the current threats and that the agencies involved had started coordinating well in advance. Organisations that notice anything suspicious should report it to the NCSA.

Apple warning and banks under pressure

Digital Economy and Society Minister Chaichanok Chidchob said organisations in many industries could be targets. He noted that Apple had reported that users in more than 99 countries were affected, including several Thai politicians.

The minister was due to meet Apple representatives on Wednesday, and the ministry is also seeking talks with Google and Line, two of the most widely used digital services in Thailand.

Banking is currently the hardest-hit sector, Mr Chaichanok said. The NCSA and the banks have already tightened their defences, and Prime Minister Anutin Charnvirakul has ordered extra security checks in other industries, especially on banking databases. Earlier this week the central bank issued its own instructions, as explained in our report on the Bank of Thailand's cyber defence order.

Initial checks of critical domestic systems found no impact, data leaks or hacking similar to the incidents reported overseas, according to the ministry.

Who is involved in the response

Mr Anutin said he ordered measures against cyber threats at a National Security Council (NSC) meeting on Monday, attended by the digital ministry, the Bank of Thailand and security agencies. PM's Office Minister Paradon Prissananantakul, who oversees the NCSA, said the threats were changing quickly.

The government will coordinate its response with:

• The National Security Council
• The Royal Thai Armed Forces
• The National Cyber Security Agency
• Domestic telecom operators
• Hardware and software companies

An operational response plan is expected next week.

What users can do now

The ministry's message is aimed mainly at organisations, but ordinary users can also reduce their risk. Keeping phones and computers updated, turning on two-factor authentication for banking and messaging apps, and taking any security notification from a device maker seriously are simple first steps. Businesses, including hotels and tour firms in Phuket that handle guest data, should review who can access their systems.

Data security has been a recurring issue in Thailand this month, from the Thai Airways data breach to the debate over foreign ownership of telecom firms covered in our report on the NBTC's response to a US push.

The original report was published by the Bangkok Post.

Image: A server room used to illustrate the Thailand cyber alert covering telecom and data networks. Photo by BalticServers.com via Wikimedia Commons, CC BY-SA 3.0.