Mobile-uplink jamming of Thaicom transponders during the Thai political crisis (November 2013 to January 2014)
What happened
During the anti-government protests of the 2013-2014 Thai political crisis, transponders on Thaicom's satellites were repeatedly jammed. Thaicom said the interference was made by a mobile upload unit which attacked the transponder hosting the Bluesky channel on both the Thaicom-5 and Thaicom-6 satellites. Bluesky had filed a formal complaint with the National Broadcasting and Telecommunications Commission over occasional interference since late November 2013; the interference intensified on 5 December, stopped, began again on 9 December, and recurred in the following weeks. The regulator asked Thaicom to provide a second feed of the channel in case of further interference, and Bluesky ran an on-screen message telling viewers how to switch to the backup channel when interference occurred, according to the commission's secretary general, Thakorn Tanthasit. Thaicom denied being the source of the jamming, saying such an action would damage its reputation and business, and acknowledged that the jamming had affected several of its clients. The commission required the sixteen operators of mobile uplink units to report the whereabouts of their trucks during the periods when the jamming took place. No source used here identifies who operated the emitting unit.
The only incident in the batch where the emitter is characterised as a mobile platform, which matters because it is what makes the regulator's response, an order that all sixteen mobile uplink operators account for their trucks, intelligible as an investigative step. No attribution was reached on the record and none is asserted here. One factual conflict is left open: the source describes Bluesky as pro-government, while other reporting describes it as the Democrat Party's channel aligned with the anti-government protest movement. The conflict does not affect any technique mapping and is recorded rather than resolved. Note also what this record is NOT: the well-known removal of Thai satellite and cable channels after the coup of 22 May 2014 was an order of the National Council for Peace and Order, not jamming, and is excluded.
Attack vector
A vehicle-mounted satellite uplink unit transmitting against the transponders hosting a specific channel on two different spacecraft, in intermittent episodes over roughly two months.
Operational impact
Repeated loss or impairment of the Bluesky channel and of other Thaicom customers sharing the affected transponders, sufficient for the national regulator to require a second feed and for the channel to instruct viewers on switching to it.
Affected segments
link, space, user
Disclosed
2014-01-20
SPARTA techniques evidenced
Each row is a technique this record evidences, with the reasoning and the source that attests to it.
What relationship, confidence, and evidence mean on the rows below
- Relationship
What kind of link this is between the technique and the target.
Mitigates: the target actively prevents, detects, or recovers from the technique.
Addresses: the target governs the technique or is relevant to it, without interdicting it. Most governance and policy obligations sit here.
Triggers obligation: the technique occurring is what triggers the duty the target imposes.
Relates to: related to the technique, but the target neither interdicts nor governs it. Used sparingly.
- Confidence
How strongly the source supports this mapping, not how severe the technique is.
High: the source supports the mapping squarely.
Moderate: supported, with a qualification such as a cross-tactic reading that stays operationally sound.
Low: the source reaches the technique only in part.
- Evidence
How close to the source text the mapping was made.
Direct: a verbatim excerpt of the cited source was read against the technique, and the rationale argues from that excerpt.
Derived: the mapping follows from the source's scope or structure, with no on-point excerpt addressing the technique.
Inferred: reached by composition through another framework, or by domain reasoning the source does not support on its face.
The satellite operator states that its transponders were attacked by an emitting unit, the national regulator treated it as intentional interference and opened an investigation into mobile uplink operators, and the affected channel filed a formal complaint. SPARTA's bibliography cites this incident at EX-0016.
Thaicom names the emitter as a mobile UPLOAD unit and its target as the TRANSPONDER hosting the channel, on two named spacecraft. An uplink unit transmitting at a transponder is EX-0016.01's behaviour stated by the operator. The batch-wide scope caveat applies: EX-0016.01's effect clause is written about telecommand and ranging traffic, and what was denied here was payload capacity.
IA-0008.01 explicitly covers transportable as well as fixed ground systems fielded by an actor to transmit mission-compatible signals. A mobile satellite uplink truck radiating at a transponder is that, named. Confidence is moderate because no unit was identified and the regulator's inquiry into the sixteen mobile uplink operators reached no published conclusion. The usual tactic caveat stands: the objective was denial, not initial access.
Occasional interference from late November, intensifying on 5 December, stopping, resuming on 9 December and recurring, with the channel remaining in operation throughout and instructing viewers how to work around it. Intermittent impairment over a period is IMP-0002.
The regulator required a second feed and the channel told viewers how to switch to the backup when interference occurred, which only makes sense if the primary became unusable during episodes. Derived because no source states that the channel went off air, and the inference runs through the mitigation rather than through an observed outage. SPARTA's bibliography cites this incident at IMP-0003.
The regulator's response establishes that the capability used is a commercially held, licensed class of equipment: sixteen operators of mobile uplink units were required to account for their trucks. Acquiring or operating such a transmit-capable ground stack is RD-0001.01's subject. Derived because no source establishes which unit was used or how it was obtained.
The emitter attacked the transponder hosting one specific channel on two different satellites, which requires knowing where that channel sits in each spacecraft's carrier plan, and repeated the attack across two months of episodes. That is the enumeration and characterisation of a mission-specific channel REC-0003.03 describes. Derived because no source describes scanning activity, only its result.
Considered and not mapped
These techniques were considered for this record because a source, a related record or SPARTA's own catalogue pointed at them. Each was read against what the sources say and not mapped. The reason is given in full.
Considered because Thaicom acknowledged the jamming affected several clients, which is the co-tenancy signature. Rejected because the source gives that in a single clause with no description of the interfering carrier or of receiver behaviour, unlike the Ethiopia and Iran records where the mechanism is described.
Considered. Nothing was permanently impaired; the transponders recovered between episodes.
Sources
The published accounts this record rests on. The tier is SafeMode Space's own assessment of the source, and the reason for it is given beside it. What the tiers mean and how they are assigned: the source tiers.
A source is listed when a mapped technique rests on it, or when it disputes the account. One the curators read but neither cited nor recorded as disputing the record is not listed, so an absence here means neither is true rather than that nobody looked.
- Thailand suffers satellite jammingTrade press
Tier 2: Broadcast-industry trade press carrying the satellite operator's and the national regulator's statements; the source SPARTA's own bibliography carries for this incident.
Tier 2: Same trade outlet, used only to establish that the well-known May 2014 removal of Thai satellite channels was a regulatory order and not jamming.
Every source SafeMode Space reproduces, and on what terms: sources and attribution.