Singapore — country threat file

Threat actors targeting Singapore

25 on record

APT1APT

CN · China· active since 2006

PLA Unit 61398 cyber-espionage group; subject of the 2013 Mandiant APT1 report.

ESP

APT12APT

CN · China· active since 2009

CN · China· active since 2010

ESP

APT27APT

CN · China· active since 2010

ESP

APT30APT

CN · China· active since 2005

ESP

APT43APT

KP · North Korea· active since 2012

ESP

BlackTechAPT

CN · China· active since 2010

ESP

Donot TeamAPT

IN · India· active since 2016

ESP

FIN6CRIME

RU · Russia· active since 2014

FIN

FIN8CRIME

?? · unattributed· active since 2016

FINRAN

NaikonAPT

CN · China· active since 2010

ESP

PatchworkAPT

IN · India· active since 2009

ESP

Pioneer KittenAPT

IR · Iran· active since 2017

IRGC-affiliated cluster involved in espionage and access brokering.

ESPext

TEMP.HermitAPT

KP · North Korea· active since 2013

US · United States· active since 2022

Native-English-speaking eCrime collective known for social-engineering helpdesks.

?? · unattributed· active since 2021

Ransomware crew historically targeting education and healthcare.

RAN

Tradecraft observed

4 threat-type families

Espionage19

Financial Fraud4

Ransomware3

Extortion2

ATTACKER ORIGIN MIX

CNChina11

KPNorth Korea5

??Unattributed4

INIndia2

RURussia1

IRIran1

USUnited States1

Sectors under attack in Singapore

33 sectors

Neighbours in Asia

49 countries · by targeting activity