Singapore — Cyber Threat Profile
Singapore is among the most cyber-mature nations globally. The Cyber Security Agency (CSA) released its Singapore Cyber Landscape 2024/2025 report confirming a 49% surge in phishing cases, a 21% rise in ransomware incidents, and Singapore ranking as the seventh most attacked country in Q4 2024 and the third-largest source of DDoS traffic globally. State-sponsored APT group UNC3886 has actively targeted Singaporean critical infrastructure using zero-day exploits and living-off-the-land techniques. The 2024 Cybersecurity Act amendments expanded CSA oversight to include new regulated entity classes and supply chain incident reporting requirements. The OT Cybersecurity Masterplan 2024 addresses industrial control system risks.- National CERT/CSIRT: SingCERT
- Data protection authority: Personal Data Protection Commission (source: CNIL)
- Secure Internet servers per 1M people (2024): 209,665.5 (source: World Bank)
- Internet users (2024): 94.4% of population (source: World Bank)
Threat actors targeting Singapore
- UNC3886 APT
- Whitefly APT
- Qilin Ransomware · 26 incident(s)
- Lynx Ransomware Ransomware · 9 incident(s)
- The Gentlemen Ransomware · 9 incident(s)
- INC Ransom Ransomware · 8 incident(s)
- LockBit Ransomware · 8 incident(s)
- SafePay Ransomware · 6 incident(s)
- 8Base Ransomware · 5 incident(s)
- Deadlock Ransomware · 4 incident(s)
- NightSpire Ransomware · 4 incident(s)
- Payload Ransomware · 4 incident(s)
- Cl0p Ransomware · 3 incident(s)
- Krybit Ransomware · 3 incident(s)
- RansomHub Ransomware · 3 incident(s)
- Akira Ransomware · 2 incident(s)
- DragonForce Ransomware · 2 incident(s)
- Embargo Ransomware · 2 incident(s)
- Lamashtu Ransomware · 2 incident(s)
- Medusa Ransomware Ransomware · 2 incident(s)
- Settra Ransomware · 2 incident(s)
- ShinyHunters Ransomware · 2 incident(s)
- Chaos Ransomware · 1 incident(s)
- Eclipse Ransomware · 1 incident(s)
- Everest Ransomware · 1 incident(s)
- FunkSec Ransomware · 1 incident(s)
- Gunra Ransomware · 1 incident(s)
- Hunters International Ransomware · 1 incident(s)
- KillSec Ransomware · 1 incident(s)
- LeakBazaar Ransomware · 1 incident(s)
- Morpheus Ransomware · 1 incident(s)
- Nova Ransomware · 1 incident(s)
- PEAR Team Ransomware · 1 incident(s)
- Play Ransomware Ransomware · 1 incident(s)
- RansomHouse Ransomware · 1 incident(s)
- ShadowByt3$ Ransomware · 1 incident(s)
- Titan Ransomware · 1 incident(s)
- APT41 APT
- Mustang Panda APT
- Naikon APT
Most targeted sectors
- Technology 23 incident(s)
- Business & Professional Services 22 incident(s)
- Manufacturing 16 incident(s)
- Energy & Utilities 6 incident(s)
- Hospitality & Tourism 5 incident(s)
- Construction 4 incident(s)
- Healthcare 4 incident(s)
- Financial Services 3 incident(s)
- Retail & Consumer 3 incident(s)
- Agriculture & Food 2 incident(s)
- Aerospace & Aviation 1 incident(s)
- Education & Research 1 incident(s)
Recent claimed incidents
- Moscord 2026-08-16
- Radiant 2026-08-14
- LHYK Marine Pte Ltd (Lee Huat Yap Kee) 2026-08-12 · Other
- NTU Alumni Club 2026-08-10 · Education
- CLLS Co Ltd 2026-08-08
- Platinum Group 2026-08-06 · Manufacturing
- Adventus 2026-08-03 · Other
- ProHealth Medical Group Pte Ltd 2026-08-02 · Healthcare
- OHK Energy 2026-07-31 · Energy & Utilities
- Akribis Systems Pte Ltd 2026-07-27 · Technology
- Digital Edge 2026-07-24 · Technology
- Lenrose 2026-07-23
- issvc.com 2026-07-22 · Technology
- Kyowa Singapore Pte Ltd 2026-07-21 · Business Services
- pokka.co 2026-07-18 · Agriculture and Food Production