Singapore — Cyber Threat Profile
Singapore is among the most cyber-mature nations globally. The Cyber Security Agency (CSA) released its Singapore Cyber Landscape 2024/2025 report confirming a 49% surge in phishing cases, a 21% rise in ransomware incidents, and Singapore ranking as the seventh most attacked country in Q4 2024 and the third-largest source of DDoS traffic globally. State-sponsored APT group UNC3886 has actively targeted Singaporean critical infrastructure using zero-day exploits and living-off-the-land techniques. The 2024 Cybersecurity Act amendments expanded CSA oversight to include new regulated entity classes and supply chain incident reporting requirements. The OT Cybersecurity Masterplan 2024 addresses industrial control system risks.- National CERT/CSIRT: SingCERT
- Data protection authority: Personal Data Protection Commission (source: CNIL)
- Secure Internet servers per 1M people (2024): 209,665.5 (source: World Bank)
- Internet users (2024): 94.4% of population (source: World Bank)
Threat actors targeting Singapore
- UNC3886 APT
- Whitefly APT
- Qilin Ransomware · 29 incident(s)
- LockBit Ransomware · 10 incident(s)
- INC Ransom Ransomware · 8 incident(s)
- The Gentlemen Ransomware · 8 incident(s)
- Lynx Ransomware Ransomware · 7 incident(s)
- SafePay Ransomware · 6 incident(s)
- 8Base Ransomware · 5 incident(s)
- NightSpire Ransomware · 4 incident(s)
- Payload Ransomware · 4 incident(s)
- Cl0p Ransomware · 3 incident(s)
- Deadlock Ransomware · 3 incident(s)
- Eclipse Ransomware · 3 incident(s)
- Krybit Ransomware · 3 incident(s)
- RansomHub Ransomware · 3 incident(s)
- Akira Ransomware · 2 incident(s)
- DragonForce Ransomware · 2 incident(s)
- Embargo Ransomware · 2 incident(s)
- Lamashtu Ransomware · 2 incident(s)
- Medusa Ransomware Ransomware · 2 incident(s)
- Settra Ransomware · 2 incident(s)
- ShinyHunters Ransomware · 2 incident(s)
- Aurora Ransomware · 1 incident(s)
- Chaos Ransomware · 1 incident(s)
- Dark Project Ransomware · 1 incident(s)
- Everest Ransomware · 1 incident(s)
- FulcrumSec Ransomware · 1 incident(s)
- FunkSec Ransomware · 1 incident(s)
- Global Ransomware · 1 incident(s)
- Gunra Ransomware · 1 incident(s)
- Hunters International Ransomware · 1 incident(s)
- KillSec Ransomware · 1 incident(s)
- LeakBazaar Ransomware · 1 incident(s)
- MetaEncryptor Ransomware · 1 incident(s)
- Morpheus Ransomware · 1 incident(s)
- Nova Ransomware · 1 incident(s)
- PEAR Team Ransomware · 1 incident(s)
- Play Ransomware Ransomware · 1 incident(s)
- RansomHouse Ransomware · 1 incident(s)
Most targeted sectors
- Technology 41 incident(s)
- Business & Professional Services 37 incident(s)
- Manufacturing 24 incident(s)
- Retail & Consumer 24 incident(s)
- Hospitality & Tourism 22 incident(s)
- Construction 10 incident(s)
- Education & Research 10 incident(s)
- Agriculture & Food 7 incident(s)
- Financial Services 7 incident(s)
- Healthcare 7 incident(s)
- Transportation & Logistics 7 incident(s)
- Real Estate 6 incident(s)
Recent claimed incidents
- TTG Asia Media 2026-09-08 · Hospitality
- MEI Architects 2026-09-07 · Professional Services
- ST Engineering 2026-09-07 · Government & Defense
- Royal Plaza On Scotts 2026-09-02 · Hospitality
- Chip 1 Exchange 2026-09-02 · Technology
- Shanghai Tunnel Engineering Co Ltd 2026-08-28 · Transportation
- Dotlines 2026-08-27 · Technology
- WIS LOGISTICS 2026-08-19 · Transportation
- Moscord 2026-08-16
- Radiant 2026-08-14
- LHYK Marine Pte Ltd (Lee Huat Yap Kee) 2026-08-12 · Other
- NTU Alumni Club 2026-08-10 · Education
- CLLS Co Ltd 2026-08-08
- aZaaS 2026-08-07 · Technology
- Platinum Group 2026-08-06 · Manufacturing