Contents Foreword 3 Overview of Cyber Threats in 2019 4 Chapter 1 — Spotlight on Cyber Threats 6 Advanced Persistent Threats 8 Website Defacements 10 Phishing URLs 12 Malware 14 Chapter 2 — WWW.TARGET.SG Singapore Cyber Landscape 2019 Copyright 2020 18 Global Trends 20 Local Case Studies 22 Case Study on POS Attacks: Incident in the E-commerce Industry 22 By Cyber Security Agency of Singapore Case Study on Ransomware Attacks: Incident in the Financial Sector 23 With contributions by the Centre of Excellence for National Security, S. Rajaratnam School of International Studies, Defence Cyber Organisation, DSO National Laboratories, Government Technology Agency of Singapore, Hwa Chong Institution, Nexus, and Singapore Police Force. Case Study on Supply Chain Attacks: Incident in the ICT Sector 24 All rights reserved. Designed by APT 811 Design & Innovation Agency ISBN: 978-981-14-5776-0 Case Study on Spear Phishing Attacks: Business E-mail Compromise and Takedown of Phishing Websites 25 How CSA Combats Cyber Threats 26 Strengthening Resiliency of the CII Sectors 26 Responding Swiftly to Cybersecurity Threats and Vulnerabilities 28 Case Study on DDoS Remediation: Cooperating with Foreign CERTs 28 Case Study: Post-2018 SingHealth Incident 29 Chapter 3 — Upping the Game on Singapore’s Cybersecurity 30 The “Singapore Cyber Landscape 2019” publication reviews Singapore’s cybersecurity situation in 2019 against the backdrop of global trends and events. CSA utilises multiple data sources to provide clarity on the common cyber threats observed in Singapore’s cyberspace. CSA does not specifically endorse any third-party claim made in this material or related references, and the opinions expressed by third-parties are theirs alone. The enclosed Pillar One: Building a Resilient Infrastructure 32 Pillar Two: Creating a Safer Cyberspace 34 Pillar Three: Developing a Vibrant Cybersecurity Ecosystem 38 Pillar Four: Strengthening International Partnerships 42 facts, statistics and analyses are based on information available at the time of publication. The contents of this publication are provided on an "as is" basis without warranties of any kind. To the fullest extent permitted by law, CSA does not warrant and hereby disclaims any warranty as to the accuracy, correctness, reliability, timeliness, noninfringement, title, merchantability or fitness for any particular purpose of the contents of this publication. CSA shall also not be liable for any damage or loss of any kind caused as a result (direct or indirect) of the use of the publication, including but not limited to any damage or loss suffered as a result of reliance on the contents contained in the publication. CSA also reserves the right to refine its analyses as the threat situation evolves, and/or as further information is made available. Looking Ahead — Cyber Trends to Watch 44 Cybersecurity Trends to Watch 46 Cybersecurity and COVID-19 48 The Psychology Behind the Persistence of Phishing 50 CSA’s Response to COVID-19 54 Looking Ahead 55 Glossary 56 Contact Details 58 1