Welcome to SOCRadar’s 2025 Indonesia Threat Landscape Report!

Explore the evolving cyber threats shaping Indonesia’s digital ecosystem with SOCRadar’s 2025 Indonesia Threat Landscape Report. This comprehensive analysis uncovers key attack trends, targeted sectors, and underground activities—equipping organizations with the intelligence needed to strengthen defenses and secure critical assets.

Key Insights from Indonesia’s Cyber Threat Landscape:

Dark Web Exposure: Public Administration dominates at 34.93% of dark web threats, followed by Education (12.59%) and Finance (9.57%). Over half of these threats (55.7%) specifically target Indonesia, underscoring its growing risk profile.

Ransomware Activity: Smaller groups make up 63.3% of attacks, while Babuk2 (14.3%) and Fog Ransomware (12.2%) are the most active named groups. Nearly three in ten ransomware incidents (28.8%) directly target Indonesian entities.

Phishing Surge: The Finance sector leads at 24.42%, with Telecommunications (10.08%) and Information Services (9.69%) following. Popular lures include fake DANA e-wallet pages, highlighting rising credential theft campaigns.

DDoS Threats: Indonesia faced over 45,101 DDoS attacks, with peak bandwidth reaching 172.01 Gbps—posing significant risks to operational continuity across industries.

Why This Report Matters:

Cybercriminals are increasingly exploiting Indonesia’s digital growth through ransomware, phishing, and dark web marketplaces. The rise of credential leaks, data sales, and politically motivated attacks demonstrates the urgent need for proactive intelligence-led defenses.

SOCRadar’s report provides organizations with:

• Early warnings on ransomware, phishing, and dark web leaks.

• Actionable intelligence to secure high-risk sectors.

• Strategic insights to strengthen resilience against DDoS and ransomware threats.

Take Action Now:

Safeguard your organization with SOCRadar’s extended threat intelligence solutions:

• Dark Web Monitoring: Detect exposed credentials and sensitive data before exploitation.

• Ransomware Intelligence: Identify active ransomware groups and mitigate potential attacks.

• Phishing Detection & Response: Stay ahead of credential theft with real-time alerts.

📥 Download the full report today to gain strategic insights and protect your digital assets.