Australia says state-sponsored attacks from China, Russia and Iran made cyberspace a ‘battleground’

The Australian Cyber Security Centre (ACSC) received 76,000 cybercrime reports last financial year, up 13 per cent from the previous period
Prime Minister Anthony Albanese called the jump in cyberattacks a ‘huge wake-up call’ and urged the private sector do better

Australia

Reuters

Published: 10:20am, 4 Nov 2022

Why you can trust SCMP

Cyberattacks against Australia from criminals and state-sponsored groups jumped last financial year, with a government report released on Friday equating the assault to one attack every seven minutes.

The Australian Cyber Security Centre (ACSC) received 76,000 cybercrime reports last financial year, up 13 per cent from the previous period, according to its latest annual cyber threat report.

While just over half of attacks targeted individuals for fraud and theft, the report warned that state-sponsored attackers made cyberspace a “battleground” and cited attacks from China’s Ministry of State Security, Iran and Russian state-linked groups.

Multiple attacks against Australian essential services were thwarted over the period, including a November 2021 attack on government-owned utility CS Energy, responsible for a tenth of the nation’s electricity output.

“It’s a huge wake-up call and companies need to get their act together … we need to do much better,” Prime Minister Anthony Albanese said at a news conference on Friday.

“The government has stepped up, the private sector needs to step up in the interest of their customers but also their own interest.”

The ACSC, part of the intelligence-collecting Signals Directorate, reported 95 cyber incidents impacting critical infrastructure last financial year.

The third annual report covers the period before high-profile hacks at Australia’s second-largest telecoms company Optus, owned by Singapore Telecommunications Ltd, and its biggest health insurer Medibank Private Ltd, which combined compromised some 14 million customer accounts.

01:40

Chinese PLA officers charged with stealing personal data of Americans in Equifax credit agency hack

The report underscored accusations that the Optus and Medibank hacks were relatively unsophisticated, blaming most major incidents on inadequate software updates.

Experts said a skills shortage is making it harder for Australia’s understaffed and overworked cybersecurity specialists to stop breaches.

Business losses attributable to cybercrime rose on average 14 per cent over the period, with the average crime costing a small business A$39,000 (US$24,540).

The jump in attacks and damage is making insurers wary and premiums in Australia jumped 56 per cent year-on-year in the second quarter, according to Marsh & McLennan Companies Inc.