Cyberattack in Singapore: threatened critical infrastructure

Singapore is confronted with a “serious” cyber attack targeting its critical infrastructure, which experts in the sector are linked to China, said the Minister in charge of national security in the country on Friday.

This attack, which testifies to an advanced computer hack called Advanced persist Threat (Apt, persistent threat advanced in French), represents a serious danger for Singapore and could compromise national security, K. Shanmugam revealed during a speech. “I can say that the attack is serious and that it is underway. It was awarded to the UNC3886 group, “said Shanmugam, also Minister of the Interior.

Mr. Shanmugam did not provide any details on the sponsors of this group, but UNC3886 was identified by Mandiant, a cybersecurity company held by Google, as a cyberspionaling group linked to China, involved in attacks on a global scale.

“As I speak to you, UNC3886 is attacking our critical infrastructure,” he said, adding that the Singapore cybersecurity agency and the competent authorities are working to manage the situation.

The Apt is a very sophisticated type of hacking which, with significant resources, generally aims to steal sensitive information and disrupt essential services such as health, telecommunications, water, transport and electricity, explained the minister. “If the attack succeeded, it could allow spy operations and cause serious disruptions for Singapore and its population,” he warned.

A successful intrusion into the Singapore electricity supply system, for example, could interrupt the distribution of energy and have cascade effects on essential services such as health and transport. “There are also economic consequences. Our banks, airports and industries could stop working. Our economy could be strongly affected, “he added.

The Minister said that between 2021 and 2024, suspected attacks of the Apt against Singapore had been multiplied by more than four. A cyber attack against a public health company in 2018 had enabled access to medical records of around 160,000 patients, including that of the former Prime Minister Lee Hsien Loong.

The attack on the critical infrastructure of Singapore “highlights the extraordinary challenges posed by the APTs,” said Satnam Narang, research engineer for the American tenable cybersecurity company. “Fighting such stealth adversaries becomes more and more difficult, as the extent and complexity of computer infrastructure that organizations and nations must defend continue to grow,” he said.