Australia under cyberattacks from ‘sophisticated state actor’

Published June 20, 2020
Morrison levelled blame at a  “sophisticated state-based cyber actor”, but declined to name the culprit, while saying that it could only come from one of a handful of states. — AFP/File
Morrison levelled blame at a “sophisticated state-based cyber actor”, but declined to name the culprit, while saying that it could only come from one of a handful of states. — AFP/File

SYDNEY: Australia’s prime minister revealed on Friday his country was under a broad cyberattack from a “state-based actor” targeting government, public services and businesses, with suspicions falling on China.

Warning Australians of “specific risks” and an increased tempo of attacks, Scott Morrison told a press conference that a range of sensitive institutions had been hit.

“This activity is targeting Australian organisations across a range of sectors, including all levels of government, industry, political organisations, education, health, essential service providers and operators of other critical infrastructure,” he said.

Morrison levelled blame at a “sophisticated state-based cyber actor”, but declined to name the culprit, while saying that it could only come from one of a handful of states.

China, Iran, Israel, North Korea, Russia, the United States and a number of European countries are known to have developed advanced cyberwarfare capabilities.

But suspicions immediately fell on Beijing, which has clashed repeatedly with Canberra as it looks to increase the cost of Australia speaking out against Communist Party interests.

Most recently Australia enraged China by calling for an investigation into the origins of the coronavirus pandemic.

But Canberra has also pushed back against what it describes as China’s economic “coercion”, covert influence campaigns and the use of technology companies like Huawei as a tool of intelligence gathering and geopolitical leverage.

China has warned its students and tourists against going to Australia, slapped trade sanctions on Australian goods and sentenced an Australian citizen to death for drug trafficking.

Last year Australia’s parliament, political parties and universities were targeted by state-backed cyberattacks, with China seen as the likely culprit.

Public broadcaster ABC cited “senior sources” confirming that China was believed to be behind today’s ongoing attacks as well.

Chinese foreign ministry spokesman Zhao Lijian said that China was “a staunch defender of cybersecurity” and has “always resolutely opposed and cracked down on all forms of cyberattacks”.

Beijing has previously described such allegations as “irresponsible” and an attempt to “smear” China.

Experts say attribution is often difficult, time-consuming and, if made public, could escalate tensions further.

The current attack appears designed to hide authorship, using so-called “copy-paste” cyber tools that can be easily found open source, Australia’s signals intelligence agency said.

They included “proof-of-concept exploit code” that targeted vulnerabilities in old versions of Microsoft, Telerik, SharePoint and Citrix products as well as “web shell” software that is uploaded and remains on compromised servers.

The attacks also used “spearfishing” techniques, sending emails with malicious files, links and Office 365 prompts.

Morrison said that he had notified the leader of the opposition and state premiers of the “malicious” cyberattacks, but said no personal data had been compromised and many of the attacks were unsuccessful. “They are not new risks, but they are specific risks,” he said.

Published in Dawn, June 20th, 2020

Opinion

Editorial

Judiciary’s SOS
Updated 28 Mar, 2024

Judiciary’s SOS

The ball is now in CJP Isa’s court, and he will feel pressure to take action.
Data protection
28 Mar, 2024

Data protection

WHAT do we want? Data protection laws. When do we want them? Immediately. Without delay, if we are to prevent ...
Selling humans
28 Mar, 2024

Selling humans

HUMAN traders feed off economic distress; they peddle promises of a better life to the impoverished who, mired in...
New terror wave
Updated 27 Mar, 2024

New terror wave

The time has come for decisive government action against militancy.
Development costs
27 Mar, 2024

Development costs

A HEFTY escalation of 30pc in the cost of ongoing federal development schemes is one of the many decisions where the...
Aitchison controversy
Updated 27 Mar, 2024

Aitchison controversy

It is hoped that higher authorities realise that politics and nepotism have no place in schools.