Systems infected by malware in Singapore more than doubled in 2025: CSA Sign up now: Get ST's newsletters delivered to your inbox - The number of malware-infected systems in Singapore more than doubled to 284,300 in 2025, driven by botnet activity and improved detection. - New stricter security requirements for residential routers will be implemented by end-2027 to combat IoT device vulnerabilities and improve cybersecurity. - Ransomware cases in Singapore increased slightly, disproportionately affecting SMEs. AI generated SINGAPORE – The number of malware-infected systems detected in Singapore more than doubled to 284,300 in 2025, driven by persistent malicious activity and improved detection of botnet devices. This is an increase from 117,300 infected systems detected in 2024, according to the latest Singapore Cyber Landscape report published on June 30. Botnet devices are computers, servers or internet-of-things (IoT) devices that malware has taken over, allowing an operator to control them remotely. “The continued profitability of malware-as-a-service operations, coupled with widespread use of consumer IoT devices with weak security configurations or unpatched firmware, has created more opportunities for botnet operators,” said the Cyber Security Agency of Singapore (CSA) in a statement on the report. To boost efforts in securing consumer IoT devices, all residential routers sold in Singapore will need to meet more stringent requirements set out by the agency by end-2027. Currently, all residential routers sold in Singapore must meet the basic level-one requirements – such as having unique default passwords and updated software – under CSA’s Cybersecurity Labelling Scheme. Routers will soon need to meet level-two requirements, including stronger security for communications, storage of sensitive data and methods to verify users. In its 10th edition, the report highlighted key trends in the cybersecurity landscape, which include the introduction of AI agents and frontier AI models that can automate and accelerate cyberattacks.