{ "id": "b73f1e92-39d5-4838-8f49-a468c83080b3", "created_at": "2026-04-06T00:21:40.926654Z", "updated_at": "2026-04-10T13:11:27.171364Z", "deleted_at": null, "sha1_hash": "bcb432983b8e73e21ed2d22bc289b771ae7a49cf", "title": "Hacker responsible for international data breaches arrested in joint Singapore-Thailand operation", "llm_title": "", "authors": "", "file_creation_date": "0001-01-01T00:00:00Z", "file_modification_date": "0001-01-01T00:00:00Z", "file_size": 35747, "plain_text": "Hacker responsible for international data breaches arrested in\r\njoint Singapore-Thailand operation\r\nBy Rachel Chan\r\nArchived: 2026-04-05 19:46:14 UTC\r\nSINGAPORE: A hacker suspected of carrying out a string of international data breaches was arrested in Thailand\r\non Wednesday (Feb 26).\r\nThe 39-year-old man was caught following a collaboration between the Singapore Police Force (SPF) and the\r\nRoyal Thai Police (RTP).\r\nInvestigations into the hacker’s activities began in 2020, when 11 victims in Singapore reported receiving ransom\r\ndemands from possible multiple threat actors operating under identities such as ALTDOS, DESORDEN,\r\nGHOSTR, and 0mid16B, SPF said in a news release on Thursday.\r\nInvestigations revealed that the multiple aliases were likely to be connected to the same threat actor responsible\r\nfor at least 75 cases worldwide.\r\n\"The threat actor is suspected to have exploited vulnerabilities in the victims’ networks before stealing the victims’\r\ndata,\" said SPF. \r\n\"The threat actor is also suspected to have published the stolen data for sale online when victims failed to pay the\r\nransom demanded.\"\r\nOfficers from the Criminal Investigation Department's (CID) cybercrime command worked closely with\r\nThailand's Central Investigation Bureau (CIB) to share investigation findings related to the suspected threat actor,\r\nwho is also believed to be responsible for a spate of data breach cases in Thailand, said SPF.\r\nThe identity of the man was established based on the leads uncovered, it added.\r\nFollowing the man's arrest, assets valued at over 10 million baht (US$295,000) were seized, including laptops,\r\nmobile phones, luxury vehicles and branded bags.\r\nThe commander of SPF's cybercrime command assistant commissioner of police Paul Tay said: \"In the cyber\r\nrealm, international cooperation is crucial as cybercriminals do not respect borders.\" \r\n\"The SPF is committed to working closely with our regional partners, and we thank the Royal Thai Police for their\r\ninvaluable collaboration in taking down this criminal network and making our cyberspace safer.\"\r\nInvestigations are ongoing, SPF said.\r\nTHE HACKER\r\nhttps://www.channelnewsasia.com/singapore/spf-royal-thai-police-global-hacker-arrested-altdos-desorden-ghostr-0mid16b-4963661\r\nPage 1 of 2\n\nThe alias ALTDOS first emerged in late 2020 when a securities trading firm in Thailand first fell victim to a data\r\nbreach, according to a joint advisory by the Cyber Security Agency of Singapore (CSA), Personal Data Protection\r\nCommission (PDPC) and SPF.\r\nVictims also include those from Singapore and Bangladesh, with ALTDOS targeting businesses for financial\r\ngains.\r\nIn August 2021, real estate agency OrangeTee \u0026 Tie received an email from ALTDOS, demanding a ransom of 10\r\nBitcoins for the safety and non-disclosure of the databases. The ransom demand also contained video footage of\r\nfive databases purported to have been stolen.\r\nThe agency was then fined S$37,000 by PDPC after it found several lapses that led to the personal data of more\r\nthan 250,000 customers and employees being compromised.\r\nIn another joint advisory, authorities noted that GHOSTR emerged in August 2023, focusing on entities in\r\nSoutheast Asia. It was known for stealing, demanding ransom and selling confidential information belonging to its\r\nvictims.\r\nSource: https://www.channelnewsasia.com/singapore/spf-royal-thai-police-global-hacker-arrested-altdos-desorden-ghostr-0mid16b-4963661\r\nhttps://www.channelnewsasia.com/singapore/spf-royal-thai-police-global-hacker-arrested-altdos-desorden-ghostr-0mid16b-4963661\r\nPage 2 of 2", "extraction_quality": 1, "language": "EN", "sources": [ "ETDA" ], "origins": [ "web" ], "references": [ "https://www.channelnewsasia.com/singapore/spf-royal-thai-police-global-hacker-arrested-altdos-desorden-ghostr-0mid16b-4963661" ], "report_names": [ "spf-royal-thai-police-global-hacker-arrested-altdos-desorden-ghostr-0mid16b-4963661" ], "threat_actors": [ { "id": "e5ccc758-f2a5-417b-ba5c-70edf39bc048", "created_at": "2022-10-25T16:07:24.481513Z", "updated_at": "2026-04-10T02:00:05.005021Z", "deleted_at": null, "main_name": "Desorden", "aliases": [], "source_name": "ETDA:Desorden", "tools": [], "source_id": "ETDA", "reports": null }, { "id": "6e8effad-d9fb-4b49-bba4-9b4e5953356d", "created_at": "2024-04-23T02:00:04.243074Z", "updated_at": "2026-04-10T02:00:03.630533Z", "deleted_at": null, "main_name": "GhostR", "aliases": [], "source_name": "MISPGALAXY:GhostR", "tools": [], "source_id": "MISPGALAXY", "reports": null }, { "id": "348b092b-f28a-41d0-a7f2-4c399f2f973f", "created_at": "2024-06-25T02:00:05.046536Z", "updated_at": "2026-04-10T02:00:03.664032Z", "deleted_at": null, "main_name": "ALTDOS", "aliases": [], "source_name": "MISPGALAXY:ALTDOS", "tools": [], "source_id": "MISPGALAXY", "reports": null }, { "id": "b4f79ca0-e94b-4abe-a61e-ea3d2a2458ad", "created_at": "2022-10-25T16:07:24.444096Z", "updated_at": "2026-04-10T02:00:04.994412Z", "deleted_at": null, "main_name": "ALTDOS", "aliases": [ "0mid16B", "ALTDOS", "Desorden", "GHOSTR" ], "source_name": "ETDA:ALTDOS", "tools": [ "Agentemis", "Cobalt Strike", "CobaltStrike", "cobeacon" ], "source_id": "ETDA", "reports": null } ], "ts_created_at": 1775434900, "ts_updated_at": 1775826687, "ts_creation_date": 0, "ts_modification_date": 0, "files": { "pdf": "https://archive.orkl.eu/bcb432983b8e73e21ed2d22bc289b771ae7a49cf.pdf", "text": "https://archive.orkl.eu/bcb432983b8e73e21ed2d22bc289b771ae7a49cf.txt", "img": "https://archive.orkl.eu/bcb432983b8e73e21ed2d22bc289b771ae7a49cf.jpg" } }