Parliament Sitting on 4 July 2022

QUESTION FOR WRITTEN ANSWER

99. Mr Sharael Taha: To ask the Minister for Communications and Information in view of malware tools such as Pipedream or Incontroller which can seize control of critical infrastructure (a) what is the threat that such malware poses to Singapore’s critical infrastructure; (b) what steps have been taken to protect Singapore from such threats; and (c) how can the Government help companies in Singapore to be aware of such threats and take the necessary precaution.

Answer: 

1. The Cyber Security Agency (CSA) monitors threats to Singapore’s cyberspace closely, especially those that threaten Critical Information Infrastructure (CII) that support essential services.

2. The strain of malware discovered in April, referred to as Pipedream or Incontroller, is designed to target equipment found in industrial control systems, which are core to the proper functioning and control of operational systems and processes. This malware enables the attacker to manipulate and disrupt industrial processes, allowing them to remotely collect information from these systems, shut down operations, sabotage industrial processes, and potentially cause physical harm and destruction.

3. When reports of this malware surfaced in April, CSA issued an advisory to our CII sector leads and owners to take precautions against this threat and make timely incident reports. To date, we have not found any evidence of Pipedream being used against our CII. Beyond CIIs, SingCERT also publishes public advisories on protecting industrial control systems, most recently in March, to advise enterprises on how they may bolster their cybersecurity measures against threats that target these systems.

4. It is important that CII owners and other enterprises remain vigilant against cyber threats and adopt the necessary cybersecurity practices to safeguard the systems and networks. CII owners are required by the Cybersecurity Act to put in place measures to meet cybersecurity standards set by CSA. For enterprises, CSA launched the SG Cyber Safe Programme in 2021 to encourage and help companies strengthen their cybersecurity posture.

5. This includes a cybersecurity certification programme for enterprises – comprising the Cyber Essentials and Cyber Trust marks – to recognise enterprises that have implemented good cybersecurity practices. CSA also developed cybersecurity toolkits for companies of various profiles to guide enterprise leaders and their employees on cybersecurity best practices. I encourage companies to apply for these cyber marks and take advantage of the resources and toolkits available on CSA’s website.

7. Mr Speaker, cyber threats are constantly evolving. Pipedream will not be the last strain of malware to threaten us. I urge everyone to stay vigilant, take cybersecurity seriously and practice good cyber hygiene.

 

Speech by Dr Janil Puthucheary, Senior Minister of State, Ministry of Communications and Information, at the Law Society's Cybersecurity and Data Protection Conference 2022 Speeches Cyber Security 04 Aug 22
MCI response to PQ on Progress of Singapore's E-sports Scene and Info-Communications and Media Professionals Required to Support Games Sector Parliament QAs Others 02 Aug 22
MCI response to PQ on Structuring Future Tenders in Whole-of-Government Period Contract and Framework Agreement to Build Up Players in Creative Services Industry Parliament QAs Others 02 Aug 22
Speech by Dr Janil Puthucheary, Senior Minister of State, Ministry of Communications and Information, at the GSMA M360 APAC 2022 on 2 Aug 2022 Speeches Public Comms, Digital Readiness 02 Aug 22
MCI response to PQ on Work of Cyber Security Agency of Singapore in Raising Cybersecurity Posture of Enterprises on Preventive Initiatives Parliament QAs Cyber Security 02 Aug 22
MCI response to PQ on "Live" Broadcast of English Premier League Matches Under IMDA's Cross-carriage Framework Parliament QAs Public Comms 01 Aug 22
MCI response to PQ on Regulatory Measures to Prevent and Block Unsolicited Messages on Unlicensed Loans and Illegal Gambling Websites Parliament QAs Cyber Security, Public Comms 01 Aug 22
Sunlight AfA celebrates a year’s work in tackling online harms Press Releases Digital Readiness, Others 27 Jul 22
Speech by Tan Kiat How, Senior Minister of State, Ministry of Communications and Information, at the Celebrate with Pick Industry Event on 26 July 2022 Speeches Others 26 Jul 22
Speech by Tan Kiat How, Senior Minister of State, Ministry of Communications and Information, at 35th CIO Workshop on 21 Jul 2022 Speeches Digital Readiness 21 Jul 22
Speech by Mrs Josephine Teo, Minister for Communications and Information, at Personal Data Protection Seminar on 20 July 2022 Speeches Personal Data 20 Jul 22
Speech by Tan Kiat How, Senior Minister of State, Ministry of Communications and Information, at the Opening of Delivery Hero Asia’s Regional Hub Workspace & Launch of Foodpanda's PowerUp! Tech Academy on 19 Jul 2022 Speeches Digital Readiness 19 Jul 22
Joint Statement on Further Promotion of Cooperation in The Field of Information and Communication Technology between The Ministry of Internal Affairs and Communications of Japan and The Ministry of Communications and Information of The Republic of Singapore on 13 July 2022 Press Releases Others, Infocomm Media 13 Jul 22
Public Consultation for Proposed Measures to Enhance Online Safety for Users in Singapore Press Releases Digital Defence, Public Comms 13 Jul 22
Keynote Address by Mrs Josephine Teo, Minister for Communications & Information, at the Operational Technology Cybersecurity Expert Panel (OTCEP) Forum on 12 July 2022 Speeches Cyber Security, Digital Readiness 12 Jul 22
MCI response to PQ on Take-up Rates for Various Digital Support Programmes and Ensuring Availability of Digital Learning Devices for Students Parliament QAs Infocomm Media, Public Comms, Digital Readiness 04 Jul 22
MCI response to PQ on Penalties for Internet Service Providers for Fault Repairs Taking Longer than 24 Hours Parliament QAs Infocomm Media, Public Comms 04 Jul 22
MCI response to PQ on Avenues of Recourse when Social Media Organisations Do Not Comply with Government's Directions Parliament QAs Digital Defence, Public Comms 04 Jul 22
MCI response to PQ on Programmes to Train Seniors to Adopt Digital Services Including Making Online Purchases and Using Digital Banking Services Parliament QAs Digital Readiness, Infocomm Media, Public Comms 04 Jul 22
MCI response to PQ on Steps to Protect Singapore's Critical Infrastructure from Malware Threat Parliament QAs Cyber Security 04 Jul 22
Speech by Dr Janil Puthucheary, Senior Minister of State, Ministry of Communications and Information, at Singapore Tamil Youth Conference on 2 July 2022 Speeches Public Comms 02 Jul 22
Speech by Mr Tan Kiat How, Senior Minister of State, Ministry of Communications and Information, at the Official Opening of ShopBack’s New Office Space on 1 Jul 2022 Speeches Digital Readiness 01 Jul 22
Joint Announcement: U.S Department of Commerce and Singapore Ministry of Communication and Information Launch Partnership Program To Empower Women In Tech Press Releases Infocomm Media 28 Jun 22
Key Points shared in Mrs Josephine Teo’s, Minister for Communications and Information, Wrap-up Interview on her working visit to the US, 28 June 2022 Speeches Infocomm Media, Others 28 Jun 22