DDoS ATTACK PEAKS OVERVIEW OF • Largest Distributed Denial-of-Service (DDoS) attack in history on unidentified US-based service provider • SamSam ransomware disrupted Atlanta’s municipal services MAR 1.7 5t 1. 3 t bp 1. 2 t bp 1.1 bp Unidentified US-based service provider FEB GitHub • APT-attributed malware (nicknamed ‘Olympic Destroyer’) disrupted Opening Ceremony of the PyeongChang Winter Olympic Games Dyn JAN OVH France LOCAL INCIDENTS SEP 2016 SEP 2016 OCT 2016 FEB 2018 MAR 2018 0.6 GLOBAL INCIDENTS RECORD PEAKS OF DISTRIBUTED DENIALOF-SERVICE ATTACKS – A COMPARISON APR • User accounts belonging to academic staff in four Singapore universities compromised in cyber-attack MAY • PageUp malware breach affected 300,000 Careers@Gov portal users JUN • Personal particulars of 1.5 million patients stolen in cyber-attack on SingHealth JUL AUG In 2018, the largest Distributed Denial-ofService (DDoS) attack ever recorded was conducted using a relatively new method. As threat actors find new attack methods, even higher peaks of DDoS attacks may be seen. ONLINE CHEATING CYBER EXTORTION COMPUTER MISUSE ACT 5,175 SEP • Cathay Pacific Airways data breach affected 9.4 million passengers OCT • 72 user accounts in Health Promotion Board’s HealthHub portal accessed illegally • Guest information stolen from 383 million Marriott International accounts NOV • Unauthorised access to more than 200 State Courts electronic case files • Personal details of German politicians exposed DEC Technology 3rd Banking and Financial Services File Hosting Provider 16,100 phishing URLs with a Singapore-link were detected. MALWARE 21 Cases of ransomware were reported to SingCERT CYBERCRIME IN SG TOTAL • Ransomware attacks hit Port of San Diego • Facebook data breach affected 30 million users • Financial information of 429,000 passengers stolen in British Airways data breach 1st 2nd Krebsonsecurity 2t TIMELINE OF SELECTED CYBER INCIDENTS IN 2018 s s s bp s t bp s CYBER THREATS IN 2018 PHISHING TOTAL 300 Unique Command and Control servers were observed in Singapore TOTAL 6,179 5,351 2,900 Botnet drones (compromised computers infected with malicious programs) with Singapore IP addresses were observed daily, on average WEBSITE DEFACEMENT 2016 2017 2018 Cybercrime cases accounted for 18.6% of overall crime in 2018. 4 605 Singapore-linked website defacements were detected. 5