Escalating Cyber Threats to East Asia's Critical Infrastructure Amid Global Conflicts

Introduction

As of March 2026, East Asia has witnessed a significant uptick in cyberattacks targeting critical infrastructure sectors, including power grids, water systems, industrial control systems (ICS), healthcare, and the financial sector. These incidents are primarily attributed to nation-state actors employing cyber operations to advance strategic objectives.

Notable Cyber Incidents

• China's UNC3886 Group: Active since at least late 2021, UNC3886 has been implicated in cyber espionage campaigns targeting critical infrastructure globally. In July 2025, Singapore's Coordinating Minister for National Security, K. Shanmugam, confirmed that the country's critical infrastructure had been attacked by UNC3886, leading to investigations by Singapore's Cyber Security Agency. (en.wikipedia.org)

• Volt Typhoon: An advanced persistent threat (APT) group affiliated with the Chinese government, Volt Typhoon has been active since at least mid-2021, primarily targeting U.S. critical infrastructure. The group's operations focus on espionage, data theft, and credential access, with campaigns designed to sabotage critical communications infrastructure between the U.S. and Asia during potential future crises. (en.wikipedia.org)

• Iranian Cyber Operations: In response to U.S. and Israeli military actions in February 2026, Iranian state-sponsored actors and affiliated hacktivist groups have escalated cyberattacks targeting critical infrastructure. These operations have included data breaches, denial-of-service attacks, and attempts to access surveillance infrastructures to aid Iranian military intelligence. Notably, the U.S.-based medical device company Stryker was attacked by the group Handala, which claimed responsibility as retaliation for alleged U.S. actions in Iran. (apnews.com)

Impact on East Asia

The cyberattacks have had tangible impacts on East Asia's critical infrastructure:

• Singapore: The attacks by UNC3886 have raised concerns about the security of Singapore's critical infrastructure, prompting the Cyber Security Agency to enhance monitoring and response measures. (en.wikipedia.org)

• Japan: The country has faced a wave of espionage-driven cyberattacks, including large-scale distributed denial-of-service (DDoS) operations and data breaches across its telecom and semiconductor sectors. These incidents have led the government to invoke its active cyber defense legislation to protect critical infrastructure. (forbes.com)

Analytical Assessment

The escalation of cyberattacks targeting critical infrastructure in East Asia reflects a broader trend of nation-state actors leveraging cyber capabilities to achieve strategic objectives. The attribution of these attacks to state-affiliated groups underscores the sophistication and resourcefulness of these operations. The tangible impacts on critical infrastructure sectors highlight the vulnerabilities inherent in interconnected systems and the potential for significant disruption.

Recommendations

To mitigate the risks associated with cyberattacks on critical infrastructure, it is imperative for East Asian nations to:

• Enhance Cyber Defense Capabilities: Invest in advanced cybersecurity technologies and skilled personnel to detect, prevent, and respond to cyber threats effectively.

• Strengthen International Collaboration: Engage in information sharing and joint exercises with international partners to improve collective defense against cyber threats.

• Implement Robust Incident Response Plans: Develop and regularly update incident response strategies to ensure rapid recovery and continuity of critical services in the event of a cyberattack.

By adopting a proactive and collaborative approach, East Asian nations can bolster the resilience of their critical infrastructure against the evolving cyber threat landscape.

Highlights:

• Iran-linked hackers take aim at US and other targets, raising risk of cyberattacks during war, Published on Thursday, March 12
• U.S. braces for cyberspace retaliation from Iran, Published on Tuesday, March 03