A Global Issue: Cybercrime In Singapore

Singapore’s Cybercrimes nearly doubled in proportion between 2014 and last year, rising from 7.9 per cent to 13.7 per cent of all crimes, according to the inaugural Singapore Cyber Landscape report.

This issue is now global and is not being properly monitored or dealt with by the governmental authorities and national police forces.

The report by the Cyber Security Agency of Singapore (CSA) found that more than eight in 10 cybercrimes (83 per cent) involved online cheating. This was followed by unauthorised access to computer material (15 per cent) and cyber extortion (2 per cent).

The authorities received 19 reports of ransomware cases from individuals and small and medium enterprises (SMEs) last year, up from two cases in 2015. The figures could be under-reported as companies are reluctant to let their reputation take a hit, noted the agency.

Other cyber threats included phishing and defacements, 2,512 phishing URLs were detected and 1,750 websites were defaced last year.

Singapore’s high level of connectivity comes with a corresponding level of vulnerability, said CSA chief executive David Koh.

“While advances in digital technology have opened up new possibilities to enhance our lives, they have also exposed us to cyber threats that aim to cheat us, steal or alter our data, disrupt our daily business activities, and cripple our critical infrastructure.”

Offences under the Computer Misuse and Cybersecurity Act soared over the past three years, from 197 cases in 2014 to 691 cases last year. Criminals tend to make use of ransomware and hacking, as well as compromise online accounts, SingPass and Internet banking accounts.

Cyber criminals will continue to adopt “more sophisticated social engineering techniques to lure their victims”, said the CSA.

Victims of website defacements tend to be SMEs. One in 10 defaced websites were hosted on an outdated operating system, such as Windows Server 2003.

“Such operating systems may no longer have security patches for new vulnerabilities and hence are easier for hackers to exploit,” the CSA said.

Websites for banking and financial services were the most commonly spoofed here, forming 31 per cent of phishing websites found last year.

Electronic payments platform PayPal and file-hosting services such as Dropbox and Google Drive were popular targets, and even government bodies such as the Ministry of Manpower and the Immigration and Checkpoints Authority were not spared.

The CSA said attackers sought personal data, such as passport numbers, that could be traded in underground markets.

The Internet Surfing Separation policy, announced in June last year, would “go a significant way” towards securing the information communication technology environment for public agencies. By cutting off Internet access on work computers, cyber attackers will not be able to gain remote access to the Government’s network and extract data as easily, said the CSA.

The report also stated that around two in five security incidents (43 per cent) that individuals and SMEs flagged to the authorities involved phishing. “Cyber criminals may attack SMEs as a means of getting to larger corporations, to which SMEs are suppliers,” said the CSA.

Business email scams were one of the top cyber threats that SMEs faced last year, with millions of dollars lost through phishing scams, where hackers impersonated company executives or business partners via email, said the agency.

Accordingly, crime statistics reflected a 20 per cent jump in email impersonation scams between 2015 and last year.

Over 60 command and control servers were detected in Singapore’s cyber space last year. Hackers use these servers to communicate with malware-infected devices and carry out malicious attacks such as data theft, email spam campaigns and DDoS (Distributed Denial of Service) attacks.

A DDoS attack involves flooding a system with data, causing disruption to business operations or distracting victims from ongoing cybercrimes.

Singapore saw a spike in DDoS extortion threats last year, with several unnamed organisations receiving emails from hackers demanding payment in lieu of launching such attacks.

Stressing the importance of resilience in the cyber realm, Mr Koh said: “This is because it is impossible to prevent successful attacks 100 per cent of the time. As Singapore pursues its plans to build a Smart Nation, we cannot afford to ignore the threats that come with it.”

Today Online

You Might Also Read:

Singapore’s Mounting Cyber Threats:

Singapore Defense Ministry Under Remote Attack:

 

 

« The Shifting Sands of Cybersecurity
What Is Selling On the Dark Net? »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

Perimeter 81 / How to Select the Right ZTNA Solution

Perimeter 81 / How to Select the Right ZTNA Solution

Gartner insights into How to Select the Right ZTNA offering. Download this FREE report for a limited time only.

The PC Support Group

The PC Support Group

A partnership with The PC Support Group delivers improved productivity, reduced costs and protects your business through exceptional IT, telecoms and cybersecurity services.

Resecurity, Inc.

Resecurity, Inc.

Resecurity is a cybersecurity company that delivers a unified platform for endpoint protection, risk management, and cyber threat intelligence.

DigitalStakeout

DigitalStakeout

DigitalStakeout enables cyber security professionals to reduce cyber risk to their organization with proactive security solutions, providing immediate improvement in security posture and ROI.

LockLizard

LockLizard

Locklizard provides PDF DRM software that protects PDF documents from unauthorized access and misuse. Share and sell documents securely - prevent document leakage, sharing and piracy.

Security Affairs

Security Affairs

Security Affairs is a blog covering all aspects of cyber security.

Kudelski Security

Kudelski Security

Kudelski Security is an international cybersecurity company providing innovative, independent and tailored security solutions for large enterprise and public sector clients.

Niksun

Niksun

Niksun's forensics-based cyber security and network performance monitoring products provide customers with actionable insight into security threats, performance issues, and compliance risks.

Cryptovision

Cryptovision

cv cryptovision GmbH is one of the leading specialists for modern, user-friendly cryptography and solutions for secure electronic identities.

Cycura

Cycura

Cycura provide advanced, customized, and confidential cyber security services, cyber investigation services, and digital forensic services to governments, companies, and organizations.

Belkasoft

Belkasoft

Belkasoft is a software vendor providing public agencies, corporate security teams, and private investigators with digital forensic solutions.

CybExer Technologies

CybExer Technologies

CybExer provide an on-premise, easily deployable solution for complex technical cyber security exercises based on experience in military grade ranges.

Proton Data Security

Proton Data Security

Proton Data Security is a certified small business specializing in the design, manufacturing and sales of data security products for permanent erasure of hard drives, tapes and optical media.

EVOLEO Technologies

EVOLEO Technologies

EVOLEO provides engineering services covering a wide range of needs in the electronics design, embedded and systems engineering.

Jerusalem Venture Partners (JVP)

Jerusalem Venture Partners (JVP)

JVP’s Center of Excellence in Be’er Sheva aims to identify, nurture and build the next wave of cyber security and big data companies to emerge out of Israel.

Research Institute in Verified Trustworthy Software Systems (VeTSS)

Research Institute in Verified Trustworthy Software Systems (VeTSS)

The main purpose of VeTSS is to support program analysis, testing and verification, to achieve guarantees of software correctness, safety, and security.

WebSec B.V.

WebSec B.V.

WebSec is a Dutch Cybersecurity firm mainly focused on offensive security services such as pentesting, red teaming and security awareness and phishing campaigns.

Prime Technology Services

Prime Technology Services

Prime Tech are a group of Red Hat, Microsoft & Cisco Certified IT Professionals with an impressive track record of consistently delivering value to our corporate clients.

Space Hellas

Space Hellas

Space Hellas is a dynamic, established System Integrator and Value Added Solutions Provider, holding a leading position in the high technology arena.

Closed Door Security

Closed Door Security

Closed Door Security is the only cybersecurity team in the north of Scotland offering everything from IASME Certification to CREST-Accredited penetration testing.

DynTek

DynTek

DynTek delivers exceptional, cost-effective professional IT consulting services, end-to-end IT solutions and managed IT services.