APCERT Cyber Drill 2025 “When Ransomware Meets Generative AI”

The Asia Pacific Computer Emergency Response Team (APCERT) today has successfully completed its annual drill to test the response capabilities of leading Computer Security Incident Response Teams (CSIRT) among Asia Pacific economies.

The theme of this year’s APCERT Drill is “When Ransomware Meets Generative AI.” This exercise reflects real world cyber security threats to our economies from Advanced Persistent Threat (APT) actors, the most sophisticated and well-resourced type of malicious cyber adversary.

The participating teams reviewed its procedures for responding to APT threat actors. This incident response exercise, coordinated across many economies, reflects the collaboration amongst the economies in mitigating cyber threats and validates the enhanced communication protocols, technical capabilities, and quality of incident responses that APCERT fosters in assuring Internet security and safety. The drill supports APCERT’s vision of a ‘safe, clean and reliable cyber space in the Asia Pacific Region through global collaboration’ enabling teams to practice their own incident response procedures in a safe and controlled environment.

24 CSIRTs from 18 economies of APCERT (Australia, Bangladesh, Brunei Darussalam, Bhutan, People's Republic of China, Chinese Taipei, Hong Kong, India, Japan, Republic of Korea, Lao People's Democratic Republic, Malaysia, Myanmar, Mongolia, Philippines, Singapore, Sri Lanka, and Thailand) participated in the drill. From the external parties, 3 CSIRTs from 2 economies of OIC-CERT and AfricaCERT participated.

As a long-standing member of APCERT, the Hong Kong Computer Emergency Response Team Coordination Centre (HKCERT) has actively participated in its annual cybersecurity drill for over a decade. This ongoing commitment highlights HKCERT’s strong collaboration with international CSIRTs/CERTs to protect regional digital assets and tackle emerging cyber threats. Locally, HKCERT plays a vital role in advancing cybersecurity in Hong Kong by issuing timely alerts, offering expert guidance, and providing training to help businesses and internet users stay resilient against evolving risks.

To further strengthen Hong Kong’s cybersecurity ecosystem, HKCERT works closely with the Government, industry stakeholders, and security professionals to promote threat intelligence sharing and build a more connected cyber community. This year, HKCERT will launch the “Cybersecurity Service Providers Connect Programme” to showcase vetted service providers and help businesses find trusted solutions. In November, HKCERT will host the “HKCERT CTF 2025” competition to nurture future cybersecurity talent. Through these initiatives, HKCERT continues to foster cybersecurity development and aims to position Hong Kong as one of the world’s most cyber-secure cities.

About APCERT

APCERT was established by leading and national Computer Security Incident Response Teams (CSIRTs) from the economies of the Asia Pacific region to improve cooperation, response and information sharing among CSIRTs in the region. APCERT Operational Members consist of 33 CSIRTs from 24 economies. Further information about APCERT can be found at: www.apcert.org/.