Phuket –
Cyber police have arrested a 26‑year‑old man in downtown Phuket who, despite having only a primary school education, taught himself advanced hacking techniques using AI chatbots. Investigators revealed that the suspect initially attempted to breach police systems to erase his own arrest warrants before turning his attention to private websites with weaker defenses.
The Cyber Police told the Phuket Express that the suspect, identified only as Sahachat, admitted during questioning that he once tried to infiltrate the Royal Thai Police database to remove his criminal record. When that failed, he shifted to exploiting vulnerabilities in commercial platforms. His most recent target was Firstup.in.th, a website offering online game top‑ups and mobile credit services.
By manipulating the payment gateway, he tricked the system into believing transactions were successful, generating fake credits that he later exchanged for prepaid game codes. The company reported losses of more than 200,000 baht.
Police Cyber Taskforce Commander Pol. Lt. Gen. Surapol Prembutr ordered a joint operation with Region 8 officers. Armed with search and arrest warrants, they raided a rented room in Phuket’s Talad Yai district. Officers seized desktop computers, laptops, four mobile phones, a firearm with ammunition, and 80 methamphetamine pills.
Investigators also discovered that Sahachat was already wanted under five separate warrants for robbery, fraud, and computer crime offenses.
During interrogation, the suspect confessed that while hiding near the Myanmar border, he relied on AI chatbots and other AI tools to study coding, analyze system vulnerabilities, and build attack programs. He described AI as his “teacher,” guiding him through technical concepts he had never formally studied.
Cybersecurity experts warn that this case shows how AI can accelerate the learning curve for malicious actors. Without regular system updates and strong defenses, organizations risk becoming easy targets for AI‑assisted attacks.
Authorities have filed several serious charges against Sahachat, including:
- Theft and receiving stolen property
- Unauthorized access to computer systems and data
- Altering or destroying computer information
- Causing disruption to computer systems
- Possession of methamphetamine with intent to sell and drug use
- Illegal possession of firearms and ammunition
