This report analyzes the July–August 2025 cyber escalation between Cambodia and Thailand, where a border conflict spilled into cyberspace and fueled attacks from opposing hacktivist groups. It highlights key findings, major incidents, and the surge in politically motivated campaigns as both sides engaged in website defacements, data leaks, and DDoS operations. The report also identifies exaggerated claims made by some actors and provides recommendations for governments and organizations to strengthen resilience. Written independently by Group‑IB experts, it aims to raise awareness of how regional tensions increasingly trigger coordinated hacktivist activity.

Join for free to read