The attack, part of a sophisticated level of cyber hacks called advanced persistent threats (APTs), poses a serious danger to Singapore and could undermine national security, K Shanmugam disclosed in a speech late on Friday.
“I can say that it is serious and it is ongoing. And it has been identified to be UNC3886,” said Shanmugam, who is also the home affairs minister.
Shanmugam did not disclose the group’s sponsors, but UNC3886 has been pinpointed by Mandiant, a cybersecurity firm owned by Google, as a China-linked cyber espionage group involved in global attacks.
“Even as we speak, UNC3886 is attacking our critical infrastructure right now,” he said, adding that Singapore’s Cyber Security Agency (CSA) and relevant authorities were dealing with the problem.
APTs are highly sophisticated and well-resourced actors that typically steal sensitive information and disrupt essential services such as healthcare, telecoms, water, transport and power, Shanmugam said.
“If it succeeds, it can conduct espionage and it can cause major disruption to Singapore and Singaporeans,” Shanmugam warned.


