With 42,000 cyber-attacks every day, Indonesia has become the hardest hit country in Southeast Asia. Experts are under the opinion that that the fast-growing economy, high internet penetration and the low level of spending on cybersecurity in Indonesia is making it an ideal target for the threat actors.

Numerous cybersecurity companies have underscored that the number of cyberattacks against Indonesian organizations has greatly surpassed those faced by its ASEAN counterparts in the past two years. While Malaysia receives over 3,000 cyber-attacks every day and 64% of Singapore organizations suffered from ransomware last year, it still does not come close to Indonesia which witnessed 361 million cyber-attacks in just the first 10 months of 2023.

Another point to be noted is that both Malaysia and Singapore are spearheading in the region in terms of building cybersecurity awareness, seeking global cooperation, developing national cybersecurity policies, capacity building, upskilling and formulating sector-specific protocols. But Indonesia on the other hand is still in a nascent stage and short of stringent policies which also goes to explain the incredibly high number of attacks.

It’s quite obvious that cybersecurity in Indonesia needs a sudden uplift as so far things like organizational oversight, lack of strategic mindset and cybersecurity skills shortage have been quite prevalent. The best insight comes from its third-lowest rank in the list of G20 countries as per the National Cyber Security Index (NCSI) which clearly depicts its vulnerable state.

A while ago, Kearney, the global management consulting firm even highlighted the archipelago’s cybersecurity spending as a percentage of its GDP which was 0.02%, the lowest in ASEAN.

Check Point, another multinational has announced Indonesia as ASEAN’s epicenter for crypto mining, botnet, mobile malware and info stealer attacks. The multinational highlighted Glupteba botnet’s prominence in the region, “Glupteba’s use of bitcoin records improves its resilience against takedowns, since the blockchain transactions cannot be deleted but remain exposed for public inspection.”

As per Check Point’s assessment, malicious actors also leveraged Ramnit banking Trojan for approximately 10% of attacks on the country’s organizations in H1 2023. First exposed almost a decade ago, the banking trojan steals information pertaining to web sessions, giving the edge to its operators in stealing bank accounts and social network accounts’ credentials.

Conclusion

Cybersecurity in Indonesia requires a swift and comprehensive upgrade, as the country has become the most targeted nation in Southeast Asia for cyber-attacks. With the rapid digitalization of its economy and society, Indonesia faces increasing vulnerabilities from various cyber threats, including data breaches, ransomware, and phishing attacks. The government’s current cybersecurity measures are inadequate to handle the sophisticated nature of modern cyber threats, putting critical infrastructure, businesses, and personal data at risk. As Indonesia continues to grow as a significant player in the digital economy, it is crucial to implement robust cybersecurity frameworks, invest in advanced technologies, and enhance the skills of its cybersecurity workforce to safeguard against these persistent threats.

Recent cyber security events have highlighted the urgent need for Indonesia to bolster its defenses. High-profile incidents, such as attacks on financial institutions and government agencies, have exposed significant gaps in the country’s cyber resilience. These events underscore the importance of not only strengthening technical defenses but also fostering a culture of cybersecurity awareness among citizens and organizations.

By prioritizing cybersecurity in national policies and collaborating with international partners, Indonesia can mitigate the risks and ensure a secure digital environment. In doing so, the nation can protect its economic interests, maintain public trust, and position itself as a resilient and secure digital hub in the region.