Singapore is currently under sustained cyberattacks targeting critical information infrastructure, allegedly carried out by the cyber-espionage group UNC3886, authorities have confirmed.
Speaking on July 18, Minister for Home Affairs and Law K. Shanmugam stated that the city-state is facing a serious threat. “UNC3886 poses a grave danger to us and has the potential to compromise our national security,” he said during the 10th anniversary dinner of the Cyber Security Agency (CSA) held at Sands Expo and Convention Centre.
According to Shanmugam, the group consists of highly sophisticated actors who use advanced techniques to avoid detection. They remain hidden within networks for extended periods with the objective of stealing sensitive data or disrupting essential services.
“Even as we speak, UNC3886 is actively attacking our critical infrastructure,” the minister warned.
While Shanmugam did not name the group’s sponsors, cybersecurity experts believe UNC3886 is linked to China. The group was first identified in 2022 by cybersecurity firm Mandiant, which stated that it has targeted key global organizations in the defense, technology, and telecommunications sectors.
The incident underscores growing regional cybersecurity concerns, particularly regarding state-linked cyber-espionage groups and their ability to infiltrate strategic digital ecosystems.