2013 Singapore cyberattacks
Date | October to November 2013 |
---|---|
Location | Singapore |
Cause | |
Motive | Introduction of internet censorship laws in Singapore |
Target | Main target:
Other targets:
|
Outcome | Multiple websites affected, most of which were vandalised by the attackers. Main perpetrator arrested in Malaysia and extradited to Singapore in November 2013. |
Arrests | 1 |
Suspects | James Raj s/o Arokiasamy |
Sentence | Four years and eight months' imprisonment |
The 2013 Singapore cyberattacks were a series of cyberattacks initiated by the hacktivist organisation Anonymous, conducted partly in response to web censorship regulations in Singapore. A member of Anonymous, known by the online handle "The Messiah", claimed responsibility for spearheading the attacks. On 12 November 2013, James Raj was charged in a Singapore court as the alleged "Messiah".[1]
Background
On 1 June 2013, a set of web censorship regulations drafted by the Media Development Authority became effective in Singapore. Under the new rules,
websites with at least 50,000 unique visitors from Singapore every month that publish at least one local news article per week over a period of two months ... will have to remove 'prohibited content' such as articles that undermine 'racial or religious harmony' within 24 hours of being notified by Singapore's media regulator.[2]
In response to concerns regarding the new rules, government officials responded that they "do not impinge on internet freedom".[3]
Incidents
On 17 October 2013, the attacks began with the People's Action Party's Community Foundation's webpage being hacked, followed by the official website of the Ang Mo Kio Town Council on 28 October 2013. Site administrators locked the site thereafter and a police report was made.[4]
Two days later, a purported member of Anonymous uploaded a four-minute-long video on YouTube, in which he, wearing a Guy Fawkes mask, threatened to "bring down key infrastructure in Singapore".[5] He also urged Singaporeans to don red and black on 5 November as well as black out their Facebook profile pictures. In the video, he made reference to The Messiah, who he called "one of [Anonymous'] comrades".[5]
The Straits Times news reporter Irene Tham posted a critique of the video on her newspaper blog. In retaliation, the Messiah defaced the blog, its title being changed to "Dear ST [Straits Times]: You just got hacked for misleading the people!". The Messiah edited the article to state that Tham had misconstrued his speech, "conveniently modifying the sentence 'war against the Singapore government' into 'war against Singapore'." He also urged Tham to either apologise within two days or resign from her job as a result of her "blasphemous lies".[6]
Later on, in an email to Yahoo Singapore, The Messiah said
we reached out to our comrades from other fractions [sic] who together with us performed DNS poisoning on the .gov.sg sites, taking them down for a period of time. But there must have also been some patching that was done as some of our favourite point of entries into their networks seemed to be fixed.[7]
On 3 November, the website of the Seletar Airport was hacked. Its webpage replaced with a black and green background with an image in the middle resembling a skull wearing a hood. The site resumed normal operations 30 minutes after the hack was first noticed.[8]
On 5 November, the Twitter and YouTube accounts of Singaporean entertainer Ridhwan Azman were hacked. According to posts from the compromised account, this was in retaliation for "dissing the legion". Apart from this incident, Anonymous did not carry out any other major activity, contrary to its promise to ignite a massive protest on that date.[9]
Two days later, the hacktivists hacked into and vandalised a subpage on the website of Singapore Prime Minister Lee Hsien Loong, following Lee's vow to bring The Messiah and his accomplices to justice.[10] It was later found that Mohammad Azhar Bin Tahir and Mohammad Asyiq Bin Tahir were responsible for the attacks.[11] Additionally, the webpage of the Istana was hacked.[12]
On 20 November, the websites of 13 schools, which were hosted on a single server, were reportedly defaced between 3:30pm to 5pm.[13]
Conviction of James Raj Arokiasamy
In November 2013, the "Messiah", identified as James Raj Arokiasamy, was arrested by the Royal Malaysia Police and extradited back to Singapore to be charged and undergo investigations. In January 2015, James Raj pleaded guilty to a total of more than 160 criminal charges, including 39 charges of computer misuse and four drug-related charges,[14] and he was sentenced to a total of four years and eight months in jail (equivalent to 56 months).[15]
Reception
News of the cyberattacks were picked up by international news outlets, including the South China Morning Post,[3] The Huffington Post,[16] Time,[17] The Star,[18] and The Jakarta Post.[19]
Regarding the hacking of the Ang Mo Kio Town Council's website, Member of Parliament Ang Hin Kee dubbed it as "malicious", promising to boost the page's security system.[4]
After the release of the YouTube video, the Government IT Security Incident Response Team immediately released an alert to all the Singaporean government agencies. The Infocomm Development Authority of Singapore responded in an official statement, "We are aware of the video, and the police are investigating the matter."[5][20] The Singapore Press Holdings (SPH), of which The Straits Times is a subsidiary, promptly took down the blog which was hacked into and filed a complaint to the police.[6]
Singaporean politician and Deputy Chairman of Singapore's Parliamentary Committee for Communications and Information, Baey Yam Keng, offered, "We do not know what the hacker's capabilities are, so it's important for us to take this very seriously." Bertha Henson, who operates Breakfast Network, a Singaporean news outlet, felt that The Messiah's action would "make the government seem right, that we [independent website operators] are just troublemakers."[21]
Prime Minister Lee Hsien Loong pledged to hunt down the team responsible for the cyberattack, stating, "It is not a laughing matter. It's not just anything goes, and you're anonymous, therefore there's no responsibility. You may think you are anonymous. We will make that extra effort to find out who you are."[22]
The cyberattacks were featured in the tenth episode of the 2015 season of Crimewatch.[23]
See also
References
- ^ "Suspected 'Messiah' hacker charged in court". Today. 12 November 2013. Archived from the original on 21 November 2013. Retrieved 18 November 2013.
- ^ "Singapore threatened by "Anonymous" hacker group". AsiaOne. 31 October 2013. Archived from the original on 4 November 2013.
- ^ a b "Anonymous activists hack Singapore newspaper over internet freedom". South China Morning Post. 2 November 2013. Archived from the original on 4 November 2013. Retrieved 4 November 2013.
- ^ a b Tan, Jeanette (28 October 2013). "Police investigating Ang Mo Kio Town Council website hacking". Yahoo!. Archived from the original on 31 October 2013. Retrieved 1 November 2013.
- ^ a b c "Government agencies on alert after hackers threaten attacks". The Straits Times. 1 November 2013. Archived from the original on 9 December 2022. Retrieved 7 April 2023.
- ^ a b ""Anonymous" hacker targets Straits Times website". Channel NewsAsia. 1 November 2013. Archived from the original on 2 November 2013. Retrieved 1 November 2013.
- ^ "Hacker 'The Messiah' claims attack on Singapore govt sites, repeats 'Anonymous' cyber threat". Yahoo! News Singapore. Archived from the original on 7 November 2013. Retrieved 5 November 2013.
- ^ "Seletar Airport website hacked". Channel NewsAsia. 4 November 2013. Archived from the original on 12 November 2013. Retrieved 12 November 2013.
- ^ "Singapore movie actor disses Anonymous, gets hacked on Twitter". Techinasia. 6 November 2013. Archived from the original on 9 November 2013. Retrieved 8 November 2013.
- ^ "Singapore PM's website hacked by Anonymous". Yahoo!. 8 November 2013. Archived from the original on 9 November 2013. Retrieved 8 November 2013.
- ^ "Singaporean jailed for hacking Prime Minister's office website". Business Times. 8 December 2014. Archived from the original on 10 August 2022. Retrieved 7 April 2023.
- ^ "Subpages on PM Lee's and Istana websites compromised". Channel News Asia. 8 November 2013. Archived from the original on 23 August 2022. Retrieved 7 April 2023.
- ^ "Websites of 13 schools defaced". Channel News Asia. 21 November 2013. Archived from the original on 21 November 2013. Retrieved 21 November 2013.
- ^ "Hacker 'Messiah' James Raj Arokiasamy pleads guilty to charges of computer misuse". The Straits Times. 23 January 2015.
- ^ "'Messiah' hacker jailed for computer misuse, taking drugs". TODAY. 30 January 2015.
- ^ Cheney, Satish (1 November 2013). "Singapore's Straits Times Allegedly Hacked By Anonymous". HuffPost. Archived from the original on 4 November 2013. Retrieved 4 November 2013.
- ^ Stout, David (1 November 2013). "Hacker Group Anonymous Targets Singapore with Cyber Attack Over Censorship". Time. Archived from the original on 3 November 2013. Retrieved 4 November 2013.
- ^ Tan, Yiliang (2 November 2013). "Singapore Straits Times website hacked by Anonymous for alleged misreporting". The Star. Archived from the original on 4 November 2013. Retrieved 4 November 2013.
- ^ "Singapore govt on alert after hackers threaten attacks". The Jakarta Post. 1 November 2013. Archived from the original on 5 November 2013. Retrieved 4 November 2013.
- ^ "'Anonymous' hack Singapore newspaper's website". BBC News. 1 November 2013. Archived from the original on 5 December 2022. Retrieved 7 April 2023.
- ^ "Anonymous hacks Singapore newspaper Straits Times". First Post. 1 November 2013. Archived from the original on 17 September 2018. Retrieved 2 November 2013.
- ^ Loh, Dylan (6 November 2013). "Govt will spare no effort to bring cyber-attackers to justice: PM Lee". Channel News Asia. Archived from the original on 7 November 2013. Retrieved 8 November 2013.
- ^ "Crimewatch 2015 EP10". YouTube. 18 May 2021. Archived from the original on 13 February 2023. Retrieved 7 April 2023.