StarHub

Profile narrative

StarHub is a Singapore-based telecommunications provider that offers services to both enterprises and individual consumers. It is identified as one of the country's four major telecommunications operators. The company delivers broadband internet to home customers, as evidenced by a DDoS attack on its domain name servers that caused broadband disruptions for residential users. StarHub also manages backbone network infrastructure that carries technical data used by its services. In 2026, the cyber‑espionage group UNC3886 infiltrated StarHub’s networks using zero‑day exploits, rootkits, and advanced persistence mechanisms to achieve long‑term access. This compromise gave the attackers upstream visibility into the services relied upon by enterprises and individuals, enabling potential surveillance and data collection without direct intrusion into customer environments.

In a separate 2025 incident, UNC3886 gained access to parts of StarHub’s network but did not disrupt services or obtain personal data, only exfiltrating a small amount of technical information described as network‑related. Mandiant characterizes UNC3886 as a China‑nexus group that has previously attacked defense, technology and telecommunications firms in the United States and Asia. StarHub, together with other local telecom operators, faces a range of threats and employs defense‑in‑depth measures, working with agencies such as the Cyber Security Agency, IMDA and GovTech to block intrusion points, improve monitoring and conduct joint threat hunting and penetration testing to strengthen resilience. Following the 2016 DDoS incident, StarHub mitigated the attacks by filtering unwanted traffic and expanding DNS capacity, restoring services within two hours on both occasions, with no compromise of customer data or impact on other services. Authorities described those DDoS attacks as unprecedented in scale and complexity, prompting coordinated investigations and advisories for other telecom operators to strengthen defenses. No explicit information about StarHub’s ownership or parent/subsidiary structure is provided in the source material.

Incidents

3 incidents linked to this organisation.