Singapore Takes Down Chinese Hackers Targeting Telco Networks

Singapore authorities disclosed that UNC3886, a China-linked APT, conducted a prolonged, targeted campaign against the country’s four telcos using a zero-day to bypass a perimeter firewall and rootkits for persistence; a multi-agency operation (Operation Cyber Guardian) ran for 11 months, successfully remediating access, enhancing monitoring, and finding only limited technical data exfiltration with no evidence of service disruption or exposure of sensitive personal data.