Silent Push Joins Singapore's IMDA Spark Programme
Silent Push has been approved to join the IMDA Spark programme and will come aboard on November 1, 2026. Run by Singapore’s Infocomm Media Development Authority (IMDA), Spark supports the growth of technology companies based in Singapore, using a mix of government support tools, community events, and access to industry mentors. Silent Push already supports security teams across Asia Pacific and Japan, so joining Spark puts that work inside Singapore’s own ecosystem, alongside the banks, agencies and service providers defending the region.
What is the IMDA Spark programme?
The IMDA Spark programme supports Singapore-based technology companies as they scale. IMDA describes its three objectives: lifting the capabilities of promising companies through a mix of government grant tools and support from industry community partners, giving enterprise tech companies the opportunity to pitch and build early reference customers in Singapore using government demand, and building a Singapore technology community that solves problems together.
Companies on the programme get help with talent recruitment when they are scaling quickly, plus access to masterclasses, community events, industry mentors and a network of professional services firms. Nominating partners including SGTech, EDBI, Vertex Ventures, Singtel Innov8, Jungle Ventures and Capgemini put companies forward for it.
Why is Silent Push joining IMDA Spark?
By joining the Singapore technology community that IMDA convenes through Spark, Silent Push will work alongside peer companies, mentors, and professional services firms on the programme to bring its approach to early adversary infrastructure detection to community events and masterclasses.
Singapore hosts regional headquarters for many banks, insurers, payment providers, and digital platforms operating across Asia Pacific and Japan. The adversary infrastructure built to target them is registered, aged and staged well before any of it reaches a customer, and being closer to the teams defending those organisations shortens the distance between what Silent Push sees being built and the analysts who need to act on it.
What does adversary infrastructure aimed at Singapore look like?
Government payout schemes are a standing lure. Silent Push analysts started from two suspicious .app domains imitating Community Development Council voucher redemption portals and mapped 688 related domains, three dedicated IPs, and the shared phishing kit behind them. The work followed a phishing operation found by Singapore’s Ministry of Defence, and the same infrastructure ran lures for UK grants, Indonesian bansos payments and UAE job offers.
This pattern holds in current research. In September 2026, Silent Push published work on a fast-flux phishing operation in which a single registration persona covered more than 20 bank brands across four continents. Infrastructure staged against organisations in Asia Pacific and Japan is usually part of something wider, and visible while the campaign is still being assembled.
What does Silent Push bring to Singapore’s security ecosystem?
Silent Push maps changing relationships across the internet. The Context Graph continuously correlates global DNS, certificate, hosting and web content data to track how infrastructure is connected, how it changes, and how it is managed, which identifies adversary infrastructure while it is still being staged. Those findings become Indicators of Future Attack® (IOFA), and an analyst can pivot from a single domain, IP, or certificate to the rest of the campaign behind it. In a documented Fortune 500 deployment, that infrastructure was identified an average of 104 days before it was used against the organisation.
For teams in Singapore, three uses come up most often:
- Brand and Infrastructure Impersonation: Finding domains, certificates, and hosting set up to impersonate a bank, a government service, or a payment platform while the pages are still being built, with the evidence packaged so teams can escalate to their takedown provider.
- External Attack Surface Mapping: Seeing what the organisation exposes to the internet, including forgotten subdomains and dangling DNS records an attacker may find first.
- Threat Infrastructure Monitoring: Tracking the infrastructure of actors who target the region’s financial services and public sector, and feeding verified adversary infrastructure into the SOC’s existing detection and blocking workflows.
Silent Push also publishes its threat research openly, including the work on DPRK fake IT worker networks. Analysts across the Spark community can read the methodology and run the same queries themselves in the free Community Edition.
How can teams in Asia Pacific and Japan work with Silent Push?
If you run a SOC, an incident response team, a CTI function, or a fraud team in Singapore or elsewhere in Asia Pacific and Japan, a Silent Push solutions engineer can give you 30 minutes on how the platform maps adversary infrastructure targeting organisations in the region, using live examples from recent campaigns. Book a demo.
What is the IMDA Spark programme?
It’s an Infocomm Media Development Authority programme that supports the growth of Singapore-based infocomm and media companies through government support tools, help with talent recruitment, masterclasses, community events, and access to industry mentors and professional services firms.
When does Silent Push join IMDA Spark?
Silent Push joins the programme on 1 November 2026.
What does Silent Push do?
Silent Push is a preemptive cyber defense platform. The Context Graph continuously maps changing relationships and management patterns across global internet data, identifies adversary infrastructure as it is staged, and delivers Indicators of Future Attack (IOFA) that security teams can act on before a campaign launches.
How does preemptive cyber defense differ from the indicators a team already receives?
Indicator feeds generally describe infrastructure that has already been used in an attack. IOFAs describe infrastructure that has been registered, aged, and staged for a campaign that has not yet run, which gives the team time to block it in advance.
Does Silent Push take down malicious domains?
No. Silent Push supplies the evidence, including the infrastructure links and the behavioral detail behind them, and the team escalates it to their takedown provider.
