Cybersecurity Incidents Involving Government Websites

Mr Desmond Choo asked the Minister for Communications and Information in view of the hundreds of malware-infected sites, including Government portals (a) whether any critical Singapore sites or servers have been compromised; and (b) what are the measures that the public should undertake to prevent such incidents.

I believe the Member is referring to the recent report by the International Criminal Police Organization's (INTERPOL's) Global Complex for Innovation, which was developed together with the Singapore Police Force (SPF) and other partners in 2017.

INTERPOL assessed the vulnerability of servers and websites in the Association of Southeast Asian Nations (ASEAN) member states and discovered nearly 9,000 compromised servers and hundreds of malware-infected websites. This included around 130 servers and websites reported to be in Singapore. Upon further investigation by the Cyber Security Agency (CSA) and SPF, the majority of these 130 servers and websites were found to be clean. Some of the infected machines included phishing websites and Command and Control Servers – machines that were issuing commands to other compromised devices. No critical Singapore servers or websites were found to be compromised.

Cyber threats are increasing, and there are malicious actors out there who seek to harm others via cyber means. The Government is not spared from this threat, with our information technology network constantly under attack. Therefore, we cannot be complacent. The Government is strengthening our cybersecurity, including by passing a Cybersecurity Bill later this year, and raising public awareness through roadshows by CSA and SPF. The Infocommunications Media Development Authority (IMDA) will also help small and medium enterprises (SMEs) strengthen their cybersecurity under the SMEs Go Digital programme.

We urge organisations, companies and the public to work with us on this shared effort. Businesses should take advantage of the many programmes we have to strengthen cybersecurity and ensure that their electronic networks are secure against hacks. Individuals can take simple steps, such as by changing the default passwords of their routers and Internet-connected devices. More detailed information is available on the GoSafeOnline website at www.csa.gov.sg/gosafeonline run by the Cyber Security Awareness Alliance.

Together, we can create a safer and more secure cyberspace for Singapore.