Singapore refreshes cyber strategy with new national tool to block malware and phishing sites

Singapore has unveiled a new national cybersecurity strategy aimed at bolstering its defenses against an escalating number of cyber threats. The strategy, introduced in October 2023, centers on a proactive, AI-driven national defense model. A crucial component of this strategy is a new national service called the Protective Domain Name Service (PDNS), designed to prevent users from accessing phishing and malware sites.

Senior Minister K. Shanmugam announced the PDNS during the opening of the 11th Singapore International Cyber Week, stating that Singapore is shifting towards a more proactive approach to cybersecurity. This approach involves acting earlier, at national scale, and at the speed of the threat. Shanmugam emphasized that this shift is a key part of Singapore's cybersecurity strategy 2026, which also includes strengthening critical infrastructure, building AI and quantum capabilities, deepening global partnerships, and investing in the cybersecurity workforce.

The PDNS, to be operated by the Cyber Security Agency of Singapore's (CSA) National Cybersecurity Command Centre, will come under the purview of the Online Criminal Harms Act, which was enacted in 2024. This Act empowers authorities to request individuals, businesses, and internet service providers to remove or block access to content suspected of being used in criminal activities, including illegal gambling, money lending, drug-related offenses, scams, and malicious cyber activities.

The PDNS will undergo a rigorous assessment and validation process before blocking websites to minimize the risk of false positives and ensure accountability. Those affected by the service's website blocking can appeal the decision through existing reconsideration and appeal processes.

The need for such a service is underscored by the significant rise in malware infections. According to CSA's latest Singapore Cyber Landscape report, the number of malware-infected computer systems detected in Singapore nearly doubled from 117,300 in 2024 to 284,300 in 2025. To counter advanced persistent threat actors, the CSA has also launched a new Cyber Command unit in July, which aims to detect and neutralize cyber threats before they reach Singapore.

The refreshed strategy also includes exploring cyber insurance pilots and setting up the Cyber Command unit to target scammers and cybercriminals. These measures are part of Singapore's broader effort to enhance its cybersecurity posture in the face of rapidly evolving threats.