Singapore disrupts UNC3886 telco intrusion campaign
Law Enforcement
Summary
Hide ▲
Show ▼
Singapore disrupted UNC3886 attacks against the country's four telecommunications operators, ending a secret 11-month counter-cyber operation. The effort, known as Operation Cyber Guardian, is described as the country's largest and longest-running anti-cyber threat initiative. Investigators said the group used a zero-day exploit and rootkits to gain and keep access, but found no evidence of telecommunications service disruption or access to sensitive or personal data.
Related Happenings
Singtel hit by data theft breach
Incident
First: 10.02.2026 00:47
Last: 10.02.2026 00:47
Sources 1
About this happening:
A confirmed **UNC3886** breach of **Singapore’s four largest telcos**—**Singtel, StarHub, M1, and Simba**—created a multi-organization compromise risk across a critical national c...
Singtel hit by data theft breach
IncidentAbout this happening: A confirmed **UNC3886** breach of **Singapore’s four largest telcos**—**Singtel, StarHub, M1, and Simba**—created a multi-organization compromise risk across a critical national c...
UNC3886 campaign against Singapore telecommunications sector
Campaign
First: 09.02.2026 19:01
Last: 09.02.2026 19:01
Sources 1
About this happening:
**UNC3886** mounted a **deliberate espionage campaign** against **Singapore's telecommunications sector**, putting **all four major telcos** at risk. The operation targeted **M1,...
UNC3886 campaign against Singapore telecommunications sector
CampaignAbout this happening: **UNC3886** mounted a **deliberate espionage campaign** against **Singapore's telecommunications sector**, putting **all four major telcos** at risk. The operation targeted **M1,...
Chinese threat actor campaigns against Taiwanese critical infrastructure in 2025
Campaign
First: 07.01.2026 16:00
Last: 07.01.2026 16:00
Sources 1
About this happening:
**Chinese cyber threat actors** intensified **campaigns against Taiwanese critical infrastructure** in **2025**, putting **energy**, **healthcare**, **communications**, **administ...
Chinese threat actor campaigns against Taiwanese critical infrastructure in 2025
CampaignAbout this happening: **Chinese cyber threat actors** intensified **campaigns against Taiwanese critical infrastructure** in **2025**, putting **energy**, **healthcare**, **communications**, **administ...
Tenfold rise in China-linked cyberattacks against Taiwan's energy sector in 2025
Target Trend
First: 07.01.2026 00:27
Last: 07.01.2026 00:27
Sources 1
About this happening:
**China-linked cyberattacks** against **Taiwan's energy sector** surged by **1,000% / tenfold** in **2025**, signaling a sharp escalation against **critical infrastructure**. The...
Tenfold rise in China-linked cyberattacks against Taiwan's energy sector in 2025
Target TrendAbout this happening: **China-linked cyberattacks** against **Taiwan's energy sector** surged by **1,000% / tenfold** in **2025**, signaling a sharp escalation against **critical infrastructure**. The...
Canadian Centre for Cyber Security warning on hacktivist ICS breaches
Public Sector Action
First: 29.10.2025 21:03
Last: 29.10.2025 21:03
Sources 1
About this happening:
The **Canadian Centre for Cyber Security** issued a warning about **hacktivists** breaching **internet-exposed ICS** across **Canada**, raising the risk of **dangerous conditions*...
Canadian Centre for Cyber Security warning on hacktivist ICS breaches
Public Sector ActionAbout this happening: The **Canadian Centre for Cyber Security** issued a warning about **hacktivists** breaching **internet-exposed ICS** across **Canada**, raising the risk of **dangerous conditions*...
Timeline
-
10.02.2026 14:30 1 articles · 3mo ago
Singapore warns of UNC3886 activity against critical infrastructure
Initial DisclosureOn July 18, 2025, Singapore’s Coordinating Minister for National Security, K Shanmugam, warned that UNC3886 had been conducting cyber-attacks against Singapore’s critical infrastructure, while keeping operational details secret to protect national security.
Show sources
- Singapore Takes Down Chinese Hackers Targeting Telco Networks — www.infosecurity-magazine.com — 10.02.2026 14:30
-
09.02.2026 02:00 2 articles · 3mo ago
CSA discloses Operation Cyber Guardian against UNC3886
Technical Analysis UpdateOn February 9, 2026, the Cyber Security Agency of Singapore disclosed Operation Cyber Guardian, saying the secret 11-month effort disrupted UNC3886 activity against M1, SIMBA Telecom, Singtel and StarHub; the four telcos detected intrusions, investigators found a zero-day exploit used to bypass a perimeter firewall and rootkits for persistence, and CSA found no evidence of telecommunications service disruption or access to sensitive or personal data.
Show sources
- Singapore Takes Down Chinese Hackers Targeting Telco Networks — www.infosecurity-magazine.com — 10.02.2026 14:30
- Singapore Takes Down Chinese Hackers Targeting Telco Networks — www.infosecurity-magazine.com — 10.02.2026 14:30