Security boom seen

For example, the government-sponsored PromptPay service will be launched nationwide in the first quarter of next year to create an ecosystem for e-payments and e-commerce. In addition, there are now nearly 30 million Internet and mobile banking accounts in Thailand.
According to Vitaly Kamluk, director of the global research and analysis team for Asia-Pacific at Kaspersky Lab, a cybersecurity expert, automation generally leads to more system vulnerability and the public’s dependence on digital technology.
As a result, more spending is required on cybersecurity measures, while public education boosting people’s digital literary should start at a young age.
Kamluk cited the recent hacking of multiple automated teller machines in Thailand as an example of the need to boost security measures. Government Savings Bank reported to police that millions of baht was stolen from its ATMs in Bangkok and several other provinces.
According to Kamluk, cyber-thieves are believed to have used keys to open the affected ATMs physically and then place malware into the machines via their USBs (universal service buses) to disable security features. As a result, money could be withdrawn from the machines without authorisation.
Regarding abuses in the Thai mobile banking sector, he said social-engineering methods were often used to trick banks and telecom service operators and/or holders of mobile banking accounts to facilitate unauthorised ID changes in a bid to steal money.
According to Kamluk, the current digital-threat landscape for mobile risks also includes infected apps, the hacking of mobile Web browsers, remote jail-breaking, data theft, mobile trojans, and ransomware.
Even the LinkedIn account of Mark Zuckerburg Zuckerberg, co-founder of Facebook, was hacked recently, exposing his “Dadada” password on the Internet, so the threat is real and widespread.
Kaspersky Lab’s data show that banks in Southeast Asia are increasingly vulnerable to cyber-criminals, especially with regard to malware planted by suspects in Malaysia, Nigeria and other locations.
This malware and ransomware have become increasingly smart, with the ability to evade anti-virus software installed in mobiles and computers. Generally, cyber-criminals will get a cut as a commission on ransom paid by affected enterprises.
Malware is practically on sale on dark websites and they are paid for in bitcoin to avoid detection.
Kamluck Kamluk said authorities needed to step up their surveillance on these cybercrimes as increased public knowledge of malware and ransomware was required to shut down the criminal platforms.
One marketplace for malware is called xDedic, which is like an eBay for hackers to get the tools to break into unscrupulous servers.
According to Kamluck Kamluk, data on compromised servers is also cheap in the world of cyber-criminals and access to such data costs as little as US$11 (less than Bt400).
In addition, some luxury hotels have become “dark” hotels as unaware VIP guests could become victims of the hackers while using the hotels’ Wi-Fi connections. Recent analysis of such cases showed that the Wi-Fi service providers’ servers were compromised, allowing criminals to steal data from hotel guests.
As mobile applications have become widespread, the threat lies in cloud-computing facilities used by mobile operators, which cover virtually any mobile services as well as Internet of Things gadgets.
In the future, self-driven vehicles could also be vulnerable if there is no reliable security.