Perpetrators of SingHealth breach identified as Whitefly in Symantec report

SINGAPORE (Mar 6): The perpetrators of the cyber attack on SingHealth in July 2018, which saw 1.5 million patient records being stolen has been identified in a new research report by cyber security company, Symantec.

The attack group, identified as Whitefly, has been launching targeted attacks against many organisations in the healthcare, media, telecommunications and engineering sectors. Most of the organisations attacked were based in Singapore and some were multinational companies with a presence in Singapore.

The tools Whitefly uses have also been deployed in other targeted attacks outside of Singapore. For example a multi-purpose command tool has been used in attacks against defense, telecoms and energy industries in Southeast Asia and Russia. The tool appears to be custom-built and were the only other attacks where Symantec had seen its use.

---

Related Stories

• Tech news in less than 5 minutes – November 2021
• Chinese threat actors compromised Southeast Asian telcos for cyber espionage: Cybereason
• Boehringer Ingelheim to acquire assets, IP from Singapore biotech firm in deal worth more than US$1 bil

---