Singapore Disrupts China-Linked Cyberattacks on Telcos

Singapore's government has successfully disrupted a series of cyberattacks launched by the China-linked cyber espionage group UNC3886 against the country's four major telecommunications operators, according to a report released by the Cyber Security Agency of Singapore on February 9, 2026.

The intrusions, which began in the summer of 2025, targeted M1, SIMBA Telecom, Singtel, and StarHub, key providers of critical infrastructure supporting the nation's digital economy. On July 18, 2025, Coordinating Minister for National Security K. Shanmugam first warned of the threat from UNC3886, an advanced persistent threat group, without disclosing specifics to protect ongoing investigations. The attacks formed part of a deliberate and well-planned campaign aimed at gaining unauthorized access to network systems, as detailed in the joint report from the Cyber Security Agency and the Infocomm Media Development Authority.

Investigations revealed that UNC3886 exploited a zero-day vulnerability to bypass perimeter firewalls at one of the operators, allowing initial entry into the network. The group then deployed rootkits and other advanced tools to maintain persistent access, obscure their...