Simba Telecom

Profile narrative

Simba Telecom, also known simply as Simba, is a telecommunications provider headquartered in Singapore. The company is identified in public reporting as one of the four major telecommunications operators operating within the city‑state. While the specific suite of products and services offered by Simba Telecom is not detailed in the available sources, its classification as a telecom provider implies involvement in voice, data and connectivity solutions for consumers and businesses. The firm’s headquarters location in Singapore situates it within a hub that hosts several other major telecom carriers.

The sources repeatedly note that Simba Telecom is counted among Singapore’s four major telecommunications providers, a designation that reflects its scale and market reach within the nation. This grouping places the company alongside Singtel, StarHub and M1 as a key participant in the country’s communications infrastructure. Being part of this quartet indicates that Simba Telecom contributes to the backbone networks that support both domestic and international traffic. The recognition as a major provider also suggests a notable footprint in terms of network coverage and service availability across Singapore.

Simba Telecom has been referenced in multiple incident reports concerning the cyber‑espionage group UNC3886, which has targeted the company on several occasions. In the earliest described incident, dated January 2025, UNC3886 penetrated portions of the telecom’s systems but was unable to disrupt services or access personal data, exfiltrating only a small amount of technical information. A later incident in July 2025 involved a zero‑day exploit that breached perimeter firewalls, after which rootkits were deployed to maintain persistence, granting the attackers limited access to some critical systems without affecting service continuity or customer data. The most recent incident, occurring in February 2026, described a more sophisticated intrusion in which UNC3886 used zero‑day exploits, rootkits and advanced persistence mechanisms to obtain long‑term access to backbone infrastructure and technical data, enabling the monitoring of authentication and upstream surveillance across shared dependencies. Despite these intrusions, the available reports state that Simba Telecom maintained service operation and did not suffer loss of customer data, attributing resilience to a coordinated response involving government agencies, the security firm Mandiant and industry experts. The company’s joint statements with other telecom operators have highlighted the broader threat landscape, including DDoS attacks, malware, phishing and advanced persistent threats, and emphasized the use of defense‑in‑depth security measures and collaborative efforts to enhance sector‑wide readiness.

Information regarding the corporate structure of Simba Telecom, such as ownership details, parent company relationships or subsidiary arrangements, is not present in the supplied sources. Consequently, any description of its equity holdings or affiliations would be speculative and is therefore omitted. The profile relies solely on the confirmed facts regarding the company’s identity as a Singapore‑based telecommunications provider and its involvement in the reported cyber‑security incidents.

Incidents

3 incidents linked to this organisation.