Indonesia
Southeast Asia · capital Jakarta · cyber picture, physical security and relations with the EU on one page
Who targets Indonesia
All 6 actors →
China (5)| Actor | Suspected sponsor | In its news · 30d | Techniques |
|---|---|---|---|
| GhostEmperor named in the news only | China |
1 | 58 |
| UAT-9244 named in the news only | China |
1 | — |
| APT17 | China |
— | 16 |
| ToddyCat | not attributed | — | 25 |
| LOTUS PANDA | China |
— | 21 |
| Naikon | China |
— | 14 |
| GOBLIN PANDA | China |
— | — |
| Hellsing | China |
— | — |
Cyber news 30 days
Every cyber article that mentions it →- Why are banks in Indonesia targets of cyberattacks? Here is what experts say ID
- Seven scam syndicates targeting victims overseas busted in Sarawak, 28 foreigners among 42 held
- 7 online scam syndicates busted, 42 held by Sarawak police
- Indonesian police arrest online scam suspects in Philippines
- Not All That Glitters Is Gold: Tracking CopperDragon’s Sparrow Framework Around the Globe
- Millions of cyber attacks threaten RI, Ministry of Digital Communication urges strengthening digital security ID
- IT threat evolution in Q3 2026. Non-mobile statistics
- More than 700 thousand cyber attacks threaten banking, here is what BSSN says ID
- Indonesia urges banks to strengthen cyber defenses amid attack surge
- OJK urges banks to brace for cyberattacks, reassure customers
Exploited vulnerabilities in its news 90 days
- CVE-2026-0257 Ransomware
- CVE-2026-63077 Ransomware
- CVE-2026-45659 Ransomware
- CVE-2026-59310 Ransomware
- CVE-2025-14733 Ransomware
- CVE-2026-15410 Ransomware
- CVE-2026-15409 Ransomware
- CVE-2025-60710 Ransomware
Incidents
Register →- Moderate Gunra Ransomware Steals 150GB from Indonesian Agri-Biotech Manufacturer
- High SecFlow Campaign Uses Commercial AI Agents Against Taiwanese and Indonesian Government Targets
- Critical Four nation-state actors deploy shared BlueMoon Chrome and Windows zero-day exploit kit within twelve days
- High China-linked SecFlow campaign uses AI agents against Asian government and industrial targets
- Critical Salt Typhoon Telecom Espionage Campaign — Ongoing
Cyber threat landscape as described in the country report of Nov 12 Machine-generated
Indonesia's cyber threat landscape during this period was dominated by a significant wave of attacks targeting its financial sector. FortiGuard Labs reported over 1.2 million cyberattack attempts against Indonesian banking, finance, and insurance industries in a 24-hour period as of November 9-10, 2026. This surge prompted the Financial Services Authority (OJK) and Bank Indonesia (BI) to activate their Computer Security Incident Response Teams (CSIRT) and issue directives for banks to enhance their digital security layers, including real-time monitoring of high-value transfers and immediate suspension of anomalous transactions. Cybersecurity firm Kaspersky also listed Indonesia as the 32nd most-attacked country globally on November 9. While the high volume of detected threats does not necessarily confirm successful breaches, it underscores the persistent and intense targeting of Indonesia's critical financial infrastructure.
No specific state-sponsored or criminal threat actors were explicitly named in the news reports as being active against Indonesia during this precise reporting period (November 05-12, 2026). Similarly, no new exploited vulnerabilities were identified in the news for this timeframe. The Indonesian government's response has focused on strengthening resilience through regulatory guidance, activation of incident response teams, and mandating regular penetration testing, cyberattack simulations, and IT audits for banks. Indonesia has also called for closer ASEAN-Japan cooperation to combat escalating cross-border cyber threats, particularly in the context of evolving Agentic AI, emphasizing the need for robust AI governance and "Security by Design" architecture.
Background: Threat actors known to target Indonesia include APT17, ToddyCat, LOTUS PANDA, Naikon, GOBLIN PANDA, and Hellsing. Threat actors named in its news in the last 30 days include GhostEmperor and UAT-9244. Exploited vulnerabilities named in its news in the last 90 days include CVE-2026-0257 (Palo Alto Networks PAN-OS), CVE-2026-63077 (JetBrains TeamCity), CVE-2026-45659 (Microsoft SharePoint Server), CVE-2026-59310 (Broadcom VMware vCenter), CVE-2025-14733 (WatchGuard Firebox), and CVE-2026-15410 (SonicWall SMA1000 Appliances).
Hotspots from the country report of Nov 12
Machine-generated- High Jakarta — Site of military deployment, wiretapping scandal, and political uncertainty surrounding the Vice President's resignation.
- Elevated Indonesian Banking Sector — Targeted by over 1.2 million cyberattack attempts in a 24-hour period, prompting heightened alert and regulatory response.
- Moderate Banten Province — Location of Exercise Trident Resolve 2026, a multinational military exercise for humanitarian assistance, military medicine, and cybersecurity.
- Moderate Strait of Malacca — A critical maritime lane where Indonesia advocates for seafarer protection and freedom of navigation, subject to regional security concerns.
Threat level last reports
Machine-generatedLatest country report
Read the full report →Relations with the EU
Factsheet →Mentioned 10 times in latest briefing. Last updated: 2026-08-22
- 18 EU cooperation projects · 15 active
- 1 EU Digital & ICT project: cyber activity here touches EU digital cooperation
- 3 trade or cooperation agreements on record
EU relations and implications country report of Nov 12
Machine-generatedIndonesia's relations with the European Union experienced a significant positive development during this period, primarily centered on the Comprehensive Economic Partnership Agreement (IEU-CEPA). EU member state ambassadors prepared for the agreement's signing and conclusion on November 4, 2026, with the official signing targeted for November 21, 2026. This accelerated timeline is critical as Indonesia is set to exit the EU's Generalised Scheme of Preferences (GSP) on January 1, 2027, making the CEPA essential for maintaining stable trade channels and market access for Indonesian products. The agreement is expected to liberalize approximately 98 percent of tariff lines, benefiting key Indonesian exports like palm oil derivatives, textiles, and footwear. On November 6, 2026, the new EU Ambassador to Indonesia, Hervé Delphin, presented his credentials, emphasizing that relations are entering a pivotal moment and that the CEPA and elevation to a strategic partnership will strengthen both parties amid global dynamics. The EU relationship outlook was assessed as stable in August 2026, and cooperation projects span trade & investment, development cooperation, climate & environment, infrastructure & transport, and education & skills. The EU also has digital projects like SCOPE Digital – Copernicus Earth Observation Southeast Asia in Indonesia.
The internal security and cyber developments in Indonesia have implications for EU interests and cooperation. The political uncertainty arising from the wiretapping scandal and the Vice President's resignation could introduce unforeseen complexities in governance and policy implementation, potentially affecting the smooth execution of the CEPA and other bilateral projects. Furthermore, the wave of cyberattacks on Indonesia's financial sector highlights a shared vulnerability in the digital domain. Given the EU's digital cooperation projects like SCOPE Digital, these cyber threats underscore the importance of robust cybersecurity frameworks and continued collaboration to protect shared digital infrastructure and data. The EU's interest in a stable and secure Indonesia, as a key partner in Southeast Asia, is directly impacted by both internal political stability and resilience against cyber threats.
| Agreement | Type | Budget | Organisation | Period | Status | |
|---|---|---|---|---|---|---|
| ARISE Plus — ASEAN Regional Integration Support | Trade & Cooperation | EUR 94M | ASEAN | 2017–2024 | COMPLETED | Source ↗ |
| ASEAN Customs Transit System (ACTS) | Trade & Cooperation | — | ASEAN | 2020–2025 | ACTIVE | Source ↗ |
| EU-Indonesia CEPA (Comprehensive Economic Partnership Agreement) | Economic Partnership Agreement | — | ASEAN | 2025 | PLANNED | Source ↗ |
Previous reports
Machine-generated- Indonesia Security Report — November 11, 2026
- Indonesia Security Report — November 10, 2026
- Indonesia Security Report — November 09, 2026
- Indonesia Security Report — November 08, 2026
- Indonesia Security Report — November 07, 2026
- Indonesia Security Report — November 06, 2026
- Indonesia Security Report — November 05, 2026
- Indonesia Security Report — November 04, 2026
- Indonesia Security Report — November 03, 2026
- Indonesia Security Report — November 02, 2026