OVERVIEW OF CYBER THREATS IN 2017 Mass defacement of 2 million WordPress websites due to unpatched vulnerability GLOBAL INCIDENTS Jan SINGAPORE INCIDENTS Feb WannaCry ransomware hits 200,000 victims in over 150 countries Mar Apr May All 3 billion Yahoo accounts hit in 2013 data breach NotPetya ransomware targets Ukraine; spreads globally Jun Jul Multiple website defacements NUS & NTU breached in APT attacks Details of 850 personnel stolen in breach of MINDEF’s I-net system Aug Over 140 million customers exposed by Equifax data breach Bad Rabbit ransomware affects systems in Russia and Eastern Europe Sep Oct Personal data of 5,400 customers compromised in insurance company data breach Triton malware threat to industrial control systems Nov Dec First conviction of Dark Web-related crime in Singapore Uber's 2016 data breach affected 380,000 users in Singapore Schools hit by ransomware PHISHING 23,420 phishing URLs with a Singapore-link were detected. MALWARE Commonly spoofed websites: File-Hosting Services (e.g. Dropbox) Technology (e.g. Microsoft) Banking & Financial Services (e.g. PayPal) 750 unique Command and Control servers were observed in Singapore. 2,700 botnet drones (compromised computers infected with malicious programs) with Singapore IP addresses were observed daily, on average. WEBSITE DEFACEMENTS 2,040 Singapore-linked website defacements were detected. Main targets: SMEs from sectors such as manufacturing, retail, and information and communications technology. >400 malware variants were detected. Conficker, Mirai, Cutwail, Sality and WannaCry accounted for over half the observed daily infections. TYPES OF THREATS REPORTED TO SINGCERT* CYBERCRIME 5,430 cybercrime cases accounted for 16.6 per cent of overall crime. Online cheating Cyber Extortion CMCA Phishing 6% Compromised systems 3% 3% Ransomware 6000 Spoofed e-mails 4000 Tech support scam 11% Defacements 2000 0 Malicious websites 2015 2016 RANSOMWARE 2017 17% 25 cases of ransomware were reported to SingCERT. 21% *Approximate percentages 39%