> ## Documentation Index
> Fetch the complete documentation index at: https://docs.reyhford.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Southeast Asia Threat Landscape

> ICS/OT threat landscape in Southeast Asia — exposure and regional actors.

Southeast Asia is a high-value ICS/OT environment: rapid industrialization, mixed
IT/OT estates, and geopolitical pressure that Western-centric TI often underweights.

## Why SEA matters

**Mixed IT/OT.** Facilities across Thailand, Vietnam, Indonesia, Malaysia, and the
Philippines blend modern Ethernet PLCs with legacy gear never designed for the internet.

**Supply-chain chokepoints.** Energy, water, and manufacturing corridors serve global logistics.

**OT security maturity.** Segmentation and OT monitoring remain uneven vs NA/EU norms.

## Owned capacity

Reyhford’s owned honeypot capacity today is **`edge-sgp-001` (Singapore)**. Customer-enrolled
sensors elsewhere expand coverage; confidence **100** typically needs multi-sensor
corroboration (see [Confidence Scoring](/fundamentals/confidence-scoring)).

## Actors active in the region

See [Threat actor profiles](/regional/threat-actor-profiles) for APT41, APT32/OceanLotus,
Lazarus, and opportunistic ransomware trends toward SEA industrials.