2016: malware on election-related web infrastructure 9/22/26, 11:03 AM Myanmar Cyber Threat Landscape, 2016–2026: A Public-Source Review — Malware INFO Blog Citizen Lab's April 2016 investigation documented malware samples hosted on infrastructure associated with Myanmar's Union Election Commission. The report connected material to its UP007 investigation and discussed a Trochilus-linked sample described by ASERT. The defensible observation is that trusted public web infrastructure was used to host suspicious material. Hosting alone does not reveal every victim, the complete compromise path, or a fully proven objective. The case established an early theme for the decade: users may assign trust to an official domain, but domain ownership does not guarantee that every hosted file is trustworthy. Defenders need independent file identity, reputation, signing, and behavior evidence even when content originates from a familiar website. 2017: website defacement and crisis-linked hacktivism Democratic Voice of Burma reported in September 2017 that several Myanmar government websites were targeted and displayed altered content. This is a public-trust and availability event, not automatically an espionage case. The contemporary report did not provide an independently verified intrusion path or a complete inventory of affected sites, so attribution should remain at the level stated by the source. Defacement is sometimes dismissed because it can be visually obvious and operationally short-lived. That is a mistake. It demonstrates loss of control over a public communication channel and can create misinformation, reputational harm, or a path to further compromise. But it should not be counted as equivalent to credential theft or covert document collection. 2019: Myanmar in wider APT reporting Kaspersky's 2019 APT review described HoneyMyte targeting governments including Myanmar and separately noted a Myanmar bank compromised by BlueNoroff. This places Myanmar organizations within the vendor's campaign assessment, but the review spans multiple actors, targets, and countries. It is not evidence that every described tool affected Myanmar, or that the selected cases represent nationwide activity. Skip to content https://www.malwareinfo.app/blog/posts/myanmar-cyber-threat-landscape-2016-2026/?utm_source=chatgpt.com 7/19