Myanmar
Southeast Asia · capital Naypyidaw · cyber picture, physical security and relations with the EU on one page
Who targets Myanmar
All 4 actors →
China (4)| Actor | Suspected sponsor | In its news · 30d | Techniques |
|---|---|---|---|
| Naikon | China |
— | 14 |
| APT41 | China |
— | 6 |
| Mofang | China |
— | 6 |
| Unnamed Actor | China |
— | — |
Cyber news 30 days
Every cyber article that mentions it →- PH strengthens international ties to address plight of Filipinos in scam hubs
- Exodus in Karen State’s Shwe Kokko as Chinese-run cyber scams relocate to Payathonzu
- Seven scam syndicates targeting victims overseas busted in Sarawak, 28 foreigners among 42 held
- Thailand video news | Thailand boosts border security as Myanmar clashes spill across frontier, Khon Kaen University student earns NASA recognition for cybersecurity discovery
- PM Anutin leads talks on cyber threats and national security
- Prime Minister orders upgrade to handle cyber threats, instructs to take care of those fleeing the Thai-Myanmar border according to humanitarian principles TH
- Lured into an online scam network, an African man spent almost a year in Cambodia trying to go home
- Penang cops bust 14 online scam call centres, arrest 141
- Online scam syndicate raking in RM6mil in 2 months busted
- Hong Kong beautician gets 4 years for selling friends to Myanmar scam hub
Exploited vulnerabilities in its news 90 days
- No CVE named in coverage of this country in the last 90 days.
Incidents
Register →Cyber threat landscape as described in the country report of Nov 12 Machine-generated
Myanmar faces a significant and evolving cyber threat landscape, primarily driven by the military junta's efforts to control information and suppress dissent, alongside criminal activities. The activation of the Cybersecurity Law on July 30, 2025, has provided the regime with extensive powers for online surveillance, data access, and the ability to block websites and prosecute critics. This law also criminalizes the use of VPNs without specific permission, making it harder for citizens to bypass restrictions and access independent information. The regime is actively using the Person Scrutinization and Monitoring System (PSMS), a digital surveillance tool developed with Chinese technical support, to cross-check national registration numbers against criminal records at various checkpoints, leading to arrests of individuals suspected of anti-regime activities.
In terms of incidents, Myanmar authorities announced in October 2026 the arrest of Wai Phyo Aung (also known as Aung Myo) on September 10, 2026, for alleged involvement in data-theft and extortion attacks on government department networks, private online service providers, and digital payment systems during 2026. The attackers reportedly threatened to publish users' personal information online and demanded money. While specific organizations were not named, the incidents affected a college, a job-search website, a foreign university, a vehicle-rental brokerage, a telecommunications website, and a private digital payment system. This highlights the vulnerability of both public and private sector entities to cybercrime, particularly extortion and data breaches. The government's response appears to be focused on law enforcement actions and increasing surveillance capabilities, rather than transparent reporting or user notification duties, as the Cybersecurity Law does not mandate companies to inform affected users of breaches.
Background: Threat actors known to target Myanmar include China-linked groups such as Naikon, APT41, Mofang, and an Unnamed Actor. A notable incident on record from September 2026 involved the National Unity Government (NUG) rejecting regime data hack claims and accusing financial service providers of exposing donors.
Hotspots from the country report of Nov 12
Machine-generated- High Rakhine State — Intensified military airstrikes and ground offensives are causing significant civilian casualties and displacement.
- High Karenni State — Ongoing military attacks with aircraft, drones, and heavy weapons are resulting in civilian deaths and injuries.
- Elevated Sagaing Region — Anticipated intensification of conflict as the military focuses on fragmenting resistance groups and regaining control.
- Elevated Kachin State — Area of interest for rare-earth minerals and where China reportedly opened its border to aid rebels after a junta attack.
- Moderate Yangon — A major urban center where the Cybersecurity Law is enforced, leading to street phone checks and arrests.
- Elevated Myanmar-China Border — Strategic trade routes and areas of engagement between the junta, ethnic armed groups, and China, with recent border openings.
Threat level last reports
Machine-generatedLatest country report
Read the full report →Relations with the EU
Factsheet →Mentioned 2 times in latest briefing. Last updated: 2026-08-04
- 15 EU cooperation projects · 12 active
- 1 EU Digital & ICT project: cyber activity here touches EU digital cooperation
- 2 trade or cooperation agreements on record
EU relations and implications country report of Nov 12
Machine-generatedMyanmar's relations with the European Union during this period remain strained, primarily due to the ongoing human rights abuses and the military junta's continued grip on power. While the EU's assessed relationship outlook as of August 2026 was "Stable" and it has various cooperation projects in sectors like Infrastructure & Transport, Trade & Investment, Humanitarian, Education & Skills, and Development Cooperation, the current security and cyber developments pose significant challenges to these engagements. The EU, alongside the US and other international bodies, has imposed sanctions on Myanmar, including prohibitions on arms sales, reflecting its condemnation of the 2021 coup and subsequent violence.
The intensified military airstrikes, civilian casualties, and the deepening humanitarian crisis directly contradict the humanitarian and development goals of EU cooperation projects. The deliberate obstruction of humanitarian aid by the military, through telecommunications blackouts and movement restrictions, severely impedes the effectiveness of EU-funded humanitarian initiatives. The implementation of the draconian Cybersecurity Law and increased surveillance also raises serious concerns for EU digital projects, such as SCOPE Digital – Copernicus Earth Observation Southeast Asia, as it creates an environment hostile to digital freedoms and potentially exposes data to regime control. The EU's stance on human rights and democratic principles means that any engagement with the junta is highly scrutinized, and the increasing pragmatic engagement by the US with the junta, driven by economic interests, could complicate a unified international approach. The EU Advocate General's Opinion in September 2026 regarding civilian aircraft having military use for the Myanmar Air Force highlights the EU's ongoing efforts to prevent dual-use goods from supporting the junta's military capabilities.
Previous reports
Machine-generated- Myanmar Security Report — November 11, 2026
- Myanmar Security Report — November 10, 2026
- Myanmar Security Report — November 09, 2026
- Myanmar Security Report — November 08, 2026
- Myanmar Security Report — November 07, 2026
- Myanmar Security Report — November 06, 2026
- Myanmar Security Report — November 05, 2026
- Myanmar Security Report — November 02, 2026
- Myanmar Security Report — November 01, 2026
- Myanmar Security Report — October 31, 2026