Previous 6 / 19 Next

9/22/26, 11:03 AM Myanmar Cyber Threat Landscape, 2016–2026: A Public-Source Review — Malware INFO Blog mobile subscriptions rising from 44.56 million in 2016 to 77.48 million in 2020, while mobileinternet subscriptions rise from 29.00 million to 62.31 million over the same period. Those values provide infrastructure context: more subscriptions and more connected services create a larger environment in which digital identity, availability, and institutional trust matter. They do not measure attacks, unique people, national cybersecurity maturity, or causation. One person can hold multiple subscriptions, and the official series used here ends in 2020. Other workbook fields with formatting anomalies were excluded rather than normalized speculatively. PTD Telecommunications Context, 2016-2020 Selected public-source record • not national incident prevalence Active mobile subscriptions Mobile internet 80m 60m 40m 20m 0m 2016 2017 2018 2019 2020 Subscriptions are not unique people. The official workbook series ends in 2020. Research cutoff: 2026-09-01 • Source and method notes appear in the article Line chart of PTD active mobile and mobile-internet subscriptions in millions from 2016 to 2020, noting that subscriptions are not unique people Figure 3. Official PTD connectivity context. The two lines are not incident-volume or securitymaturity measures. 2016–2019: trusted websites, public disruption, and Skip to contentintrusion targeted https://www.malwareinfo.app/blog/posts/myanmar-cyber-threat-landscape-2016-2026/?utm_source=chatgpt.com 6/19

Select target paragraph3

● ● ●

Myanmar Cyber Threat Landscape, 2016–2026: A Public-Source Review

Report

Preview

Language

English

Topic

Digital Rights
Information Operation
Internet Connectivity / Accessibility

Author(s)

Malware Info

Date Published: Sep 1, 2026

Abstract: Myanmar's digital environment changed sharply between 2016 and 2026. Public reporting from researchers, incident-response organizations, newsrooms, international bodies, and affected organizations describes a varied record: malware hosted on trusted government infrastructure, website defacement, access-control failures, exposed institutional records, targeted cyberespionage, credential and document theft, and a regional online-fraud economy tied to severe human harm.

These events should not be collapsed into one trend line or one actor story. Cyberespionage is not the same phenomenon as hacktivism. A reported data leak does not establish the same facts as an analyst-observed malware chain. Organized online fraud has different incentives, victims, and evidence from a government-focused intrusion. This review therefore separates event category, affected sector, technique, and evidence class.

Research cutoff: September 1, 2026. The record below is a selected public-source record, not a national incident count or national incident prevalence. It cannot show how many incidents were never detected, never disclosed, or were reported only to private parties. It also cannot establish the intent behind every observed tool or infrastructure relationship.

Three conclusions are nevertheless defensible:

Trusted channels matter. Official websites, downloadable archives, document-like containers, and legitimate loading behavior repeatedly appear in the public record. Identity and information are recurring targets. Documents, browser credentials, session cookies, webmail, personnel records, registration data, and application records all appear across different cases. Evidence quality varies. Technical observation, official acknowledgement, secondary reporting, and analytical assessment answer different questions and must remain visibly distinct.

Link: source

Primary Documents

Myanmar Cyber Threat Landscape, 2016–2026_ A Public-Source Review — Malware INFO Blog.pdf
English
Download View

Myanmar Internet Project

Select target paragraph3

Myanmar Cyber Threat Landscape, 2016–2026: A Public-Source Review

Primary Documents

Notifications