The Chinese Embassy in Singapore has denied any involvement with UNC3886, a cyber espionage group accused of launching attacks on Singapore’s critical infrastructure.
The denial follows reports by cybersecurity firm Mandiant, which linked UNC3886 to China and warned of its activities targeting sectors such as banking, energy, health, transport, and telecommunications.
UNC3886 is known for using zero-day exploits and advanced malware to infiltrate systems and maintain long-term access. It has previously targeted defence and tech organisations across Asia, Europe, and the United States.
In a statement released this week, the Chinese Embassy described the allegations as “groundless and politically motivated,” reaffirming that “China firmly opposes all forms of cyberattacks and does not encourage, support or condone hacking activities.”
The embassy also stated that China is “a major victim of cyberattacks” and expressed “strong dissatisfaction” with being linked to UNC3886.
Singaporean officials had earlier raised alarms over the group’s operations but stopped short of directly naming any nation. Coordinating Minister for National Security K. Shanmugam described UNC3886 as “a highly sophisticated threat actor” capable of undermining national security.
He confirmed that the group had been detected in parts of Singapore’s critical infrastructure, including systems that support essential services.
The Cyber Security Agency of Singapore (CSA) is leading investigations and working with affected organisations to contain the threat. CSA has warned that such attacks are often prolonged and difficult to detect, and has called for stronger cyber hygiene and resilience across all sectors.
The situation has sparked renewed global conversations on cybersecurity transparency, accountability, and state-sponsored digital threats.
Experts say the incident highlights the growing risks posed by advanced persistent threat (APT) actors and the need for international cooperation to safeguard digital infrastructure.
Why is China often fingered in cybersecurity concerns? Should countries name and shame suspected cyber attackers—or focus on quiet diplomacy and technical fixes?Rate, Like 👍, Comment💬, share this article, Follow us on our social media handles, and Submit your own story to get featured and earn rewards!
WhatsApp Channel
Telegram Channel
