Thai Mobile Cyberattacks Surge 127% Despite Region-Leading User Awareness
New data reveals a dangerous gap between cybercrime awareness and the sophistication of mobile threats in Thailand.
Mobile-device cyberattacks in Thailand surged by 127% year-on-year during the first quarter of 2026. This spike occurs despite Thai consumers maintaining the highest level of cybercrime awareness in the Asia-Pacific region, signaling that knowledge alone is no longer a sufficient defense against evolving threats.
According to threat-monitoring data and a B2C Pulse Survey from Kaspersky, Thailand's awareness level stands at 39%, the highest among surveyed Asia-Pacific markets. However, this awareness has not deterred a massive increase in attacks. Thailand is part of a broader regional trend of escalating mobile threats; Taiwan saw the most dramatic increase at 373%, followed by Sri Lanka at 132%, Bangladesh at 108%, China at 69%, and the Philippines at 28%. In terms of sheer volume, India and Indonesia recorded the highest total number of attacks, with 18,187 and 15,163 incidents, respectively.
The Digital Gateway
The vulnerability of the region is tied to its rapid adoption of mobile-first digital services. Asia-Pacific users engage with online shopping and digital financial services at rates higher than global averages. Specifically, digital wallets now account for approximately 70% of all online payments across the region. With mobile subscribers in the Asia-Pacific expected to reach 2.11 billion by 2030, the smartphone has transitioned from a communication tool to the primary gateway for a user's financial, social, and professional existence.
The Security Gap
This shift in usage has created a critical security imbalance. Choon Hong Chee, Kaspersky’s head of consumer channel for Asia-Pacific, noted that smartphones are often not protected to the same level as personal computers, even though they now handle the most sensitive transactions. The current trend suggests that the speed of threat evolution is simply outpacing the ability of users to protect themselves through awareness and manual security management.
Moving Toward Embedded Security
Because individual awareness is failing to stop the surge, security experts are calling for a fundamental change in how mobile protection is delivered. Kaspersky is now advocating for "embedded security," a model where protection is integrated directly into applications by banks and software developers. By shifting the burden of security from the end-user to the developer, the industry aims to close the gap between the sophistication of attackers and the vulnerability of the mobile device. The coming months will likely see whether financial institutions and app developers adopt these integrated measures to stem the tide of regional attacks.