ASEAN Regional Coalition to #StopDigitalDictatorship
Cyber-attacks on HRDs and Activists
Continue to Erode Democracy
Police) in relation to law enforcement’s failure to
Much like other Southeast Asian countries, Indo-
on which a piece on the case was also published,
nesia is not a safe place for HRDs and activists
was subjected to a series of DDoS attacks and be-
to express their views online. A range of cyber tor-
came inaccessible for a period of time.110
ture techniques are employed, the most prominent
being intimidation, humiliation, slander, and doxxing.103 As human rights activism increasingly became digital in the wake of the COVID-19 pandemic, the methods of attacks diversified to include
Zoom-bombing and SMS phishing. Out of 147
digital attacks SAFEnet recorded throughout 2020,
66 or 44.90% targeted critical voices such as journalists, activists, university students, and civil society organisations.104 In 2021, SAFEnet reported
193 incidents of digital attack, with activists being
targeted in 50 of them, civil society in 10 and media workers in 25.105 Another data, however, shows
that the total number of attacks against HRDs in
that same year stands at 120.106 In 2022, there
were at least 97 cases of criminalisation related
to expression in the digital realm, with 16 involving
activists and 11 involving student activists. They
both rank among the top 5 most victimised groups
of 2022.107 Data for 2023 SAFEnet report has not
yet been released.
handle a rape case involving three minors in East
Luwu, South Sulawesi. Project Multatuli’s website,
Moreover, state authorities regularly block access
to websites and online news outlets perceived to
be critical of the administration.111 Among those
that have been blocked are information-sharing
blogs such as Reddit and websites focused on
political content, gaming, alcohol and drugs, gambling and online dating.112 In July 2022, Indonesia
implemented additional restrictions by blocking
access to various online platforms, including the
search engine website Yahoo, payments from PayPal, and several gaming websites. These actions
were taken due to the failure of these platforms
to comply with licensing regulations imposed by
authorities.113 In 2023, Indonesia blocked 14 websites comprising 16 links in the category of Political Criticism and Terrorism and Militants. More
than half of the blocking indicated HTTP blocking
only (51.6%) as opposed to DNS tampering only
(32.3%) or both DNS tampering and HTTP blocking (16.1%).114 Blocking is rarely, if ever, done with
transparency as to its justification and duration.
In May 2021, some 50 former members of KPK who
There has also been a proliferation of state-spon-
had been discharged for having allegedly failed the
sored “buzzers” on social media platforms who
National Knowledge Examination–a test designed
are hired by the government to promote state poli-
to gauge one’s proficiency in Indonesia’s state ide-
cies or spread disinformation to manipulate public
ology–reported being doxxed, Zoom bombed with
opinion on certain sensitive issues, oftentimes by
pornographic materials and having their email
using doxxing or harassment techniques. Buzzers
accounts hacked by anonymous persons.108 The
receive between IDR 1 and 50 million ($66–3,344)
events persisted through September, targeting dif-
for their work, and are largely employed on a con-
ferent former members and individuals who pro-
tractual basis.115 One buzzer team leader inter-
tested the discharge.109
viewed by Reuters revealed that he was able to
control more than 250 accounts spread across
In another case, independent media outlet Project
Facebook, Instagram, Twitter, and other major plat-
Multatuli, became a victim of digital attacks after
forms during one operation, each with a false per-
launching an online campaign with the hashtag
sona.116 Buzzer support was notably widespread
#PercumaLaporPolisi
during the 2019 crackdown on a series of protests
96
(lit.
#NoUseReportingto-
Dawn of Digital Dictatorship: Weaponizing the Law Against Online Speech in Southeast Asia