Glossary Term Definition Advanced Persistent An attack in which perpetrators successfully gain access to a targeted system, and stay Threat (APT) undetected for a long period of time to exfiltrate, modify, or destroy critical data. APTs can also refer to the advanced, and often state-linked or state-sponsored threat actors that conduct extended campaigns, such as cyber espionage. Attack Surface Referring to all vulnerable resources of a system, or the sum of the points through which an attacker could try to enter an environment. Bot/Botnet Definition Denial-of-Service Where an attacker attempts to prevent legitimate users from accessing information (DoS) / or services online. The most common and obvious type of DoS attack occurs when an Distributed DoS attacker “floods” a network with information. In a distributed DoS attack, an attacker (DDoS) takes unauthorised control of multiple computers, which may be harnessed as a botnet, to launch a DoS attack. Downloader owners’ knowledge. A trial-and-error method which involves trying various combinations of usernames and passwords repetitively to gain access into a computer system or website. Command and Control Centralised devices operated by attackers to maintain communications with compromised (C&C) servers systems (known as botnets) within a targeted network. Critical Information The computer or computer system necessary for the continuous delivery of an essential Infrastructure (CII) service, which the loss or compromise thereof will have a debilitating effect on the availability Hacktivists A form of digital token secured by cryptography and can be used as a medium of exchange, a unit of account, or a store of value. Used synonymously with digital or virtual currency. hacking an organisation’s website. Industrial Control ICS belong to a class of Operational Technology (OT) systems used in nearly every industrial Systems (ICS) sector to monitor, control and automate industrial operations and processes. Internet of Things (IoT) The vast network of everyday objects, such as baby monitors, printers, televisions, and autonomous vehicles, that are connected to the Internet. Malspam The complex environment resulting from the interaction of people, software and services on Malicious spam or malware spam; spam e-mail that delivers malware, and usually includes malicious URLs or infected attachments. Malware Malicious software intended to perform unauthorised processes that will have adverse impact on the security of a computer system, such as virus, worm, Trojan horse, spyware and adware. Personal Data/ Data which, on its own (e.g. full name, NRIC number) or in combination with other available Information data (e.g. medical or educational information), can be used to distinguish or trace an individual’s identity. Examples include Bitcoin, Ether, and Litecoin. Cyberspace An individual or a group who wants to undermine the reputation or destabilise the operations of an entity, or to publicise their political or social agenda and gain recognition, usually by of essential services in Singapore. Cryptocurrency A type of malware which connects to another website or server to download, and sometimes run, other malware on an affected system. An automated software program used to carry out specific tasks. A botnet is a network of compromised computers infected with malicious bots, controlled as a group without the Brute-force attack Term Phishing A common technique used by threat actors to trick people (typically through e-mails) into divulging personal information, transferring money, or installing malware. the Internet by means of technological devices and networks connected to it, which does not exist in any physical form. Singapore’s cyberspace includes domain names with “.SG” or Singapore-mentions, Internet Ransomware Malware that encrypts files on a victim’s device, rendering them unusable until a ransom is paid, usually in the form of Bitcoin or other cryptocurrencies. It may spread through phishing Protocol (IP) addresses used in Singapore, and Internet Service Providers (ISPs) located here. e-mails that contain malicious attachments or links, or malicious pop-ups that appear when users access unsafe websites. Dark Web A section of the Internet only accessible through software that allows users to remain anonymous or untraceable. The Dark Web is part of the Deep Web. The Deep Web encompasses web resources that search engines like Google and Yahoo cannot find, such as Spoofing Tricking computer systems or other users by hiding or faking one’s true identity. Commonly spoofed targets include e-mails, IP addresses, and websites. legitimate but private resources (e.g. e-mail), or public resources behind a paywall or log-in wall (e.g. paid journal subscriptions). Trojan Data Breach A type of malware which disguises itself as a legitimate software to trick users into downloading and installing it on their systems. Once activated, the malware will carry out The unauthorised access, collection, use, disclosure, copying, modification, or disposal of malicious actions that it is designed for. personal data or confidential information in an organisation’s possession or under its control. Watering-hole attack A type of cyber-attack targeting a particular organisation, where malware is delivered from websites that are regularly visited by the organisation’s members, and consequently infects its systems. 56 SINGAPORE CYBER LANDSCAPE 2019 57