Overview

• The Cyber Security Agency of Singapore is leading investigations and sharing threat intelligence to support operators under attack in critical sectors such as energy, transport and healthcare.
• Select units from the Singapore Armed Forces and Ministry of Defence have been mobilised to bolster the CSA’s coordination of the response.
• Cybersecurity firm Mandiant first identified UNC3886 in 2022 and describes it as a state-linked group that uses custom malware and zero-day exploits to maintain persistent access.
• Coordinating Minister K. Shanmugam said suspected advanced persistent threat attacks on Singapore have grown more than fourfold since 2021.
• The Chinese embassy in Singapore issued a statement rejecting alleged links between UNC3886 and China as ‘groundless smears and accusations’.