Australia is hit by a 'sophisticated' state-sponsored cyber attack: Scott Morrison confirms parliament, businesses, schools and hospitals are being targeted by an enemy government

  • Cyber attack has been aimed at the Australian government and companies 
  • The Prime Minister said a 'sophisticated state-based' actor was behind attacks
  • The attacks have been happening for 'many months' but have been increasing 
  • Last year China was responsible for a cyber-attack on the national parliament 

Australia is under cyber attack from a foreign government targeting universities, hospitals, industry and the government. 

Prime Minister Scott Morrison today said a 'sophisticated state-based actor' was behind ongoing attacks which have been happening for 'many months' but have been increasing recently.

He did not name any suspects but said there are 'not a large number' of countries who can carry out such large-scale cyber operations. 

Cyber expert Nick Savvides, director of strategic business at Forcepoint, told Daily Mail Australia there are ten to 15 states that could be behind the attack including Russia, China, Iran and North Korea.

He said motivation for a state-sponsored cyber attack can be to gain a foothold in an enemy's systems to shut down schools, hospitals and key industries in the event of war.  

A huge cyber attack has been aimed at the Australian government. Pictured: PM Scott Morrison

A huge cyber attack has been aimed at the Australian government. Pictured: PM Scott Morrison

The Prime Minster said investigations so far have not found any personal data has been leaked. 

He said 'many' entities have been targeted but the success of the attacks has been 'less significant'. 

We know it is a sophisticated state-based cyber actor because of the scale and nature of the targeting and the trade craft used 

'Australian organisations are currently being targeted by a sophisticated state-based cyber actor,' he said today after calling a press conference at short notice.

'This activity is targeting Australian organisations across a range of sectors, including all levels of Government, industry, political organisations, education, health, essential service providers and operators of other critical infrastructure. 

'We know it is a sophisticated state-based cyber actor because of the scale and nature of the targeting and the trade craft used,' he said.   

'Regrettably, this activity is not new. Frequency has been increasing.'

Mr Morrison said he would not name the enemy government because the threshold for attributing a cyber attack is very high. 

He said he has spoken to allies including UK Prime Minister Boris Johnson last night - and also informed leader of the Opposition Anthony Albanese and state and territory leaders.

Production at Geelong's Little Creatures brewery (pictured) restarted on Tuesday

Production at Geelong's Little Creatures brewery (pictured) restarted on Tuesday 

Lion, which has a portfolio including Little Creatures, XXXX, Tooheys and James Squire, was hit with a cyber attack on June 8

Lion, which has a portfolio including Little Creatures, XXXX, Tooheys and James Squire, was hit with a cyber attack on June 8

Defence Minister Linda Reynolds said: 'There is no doubt that malicious cyber activity is increasing in frequency, scale, in sophistication and in its impact.' 

She urged businesses to check their cyber security and take extra steps such as ensuring employees use multi-factor identification before logging in to devices. 

One of the companies possibly targetted is food and drink company Lion which was forced to shut down production for eight days following a cyber attack on 8 June.

Lion, which produces Little Creatures, XXXX, Tooheys and James Squire, shut down its Little Creatures brewery in Geelong.  

The education sector has been targeted by the cyber attacks which have been happening for months

The education sector has been targeted by the cyber attacks which have been happening for months 

Prime Minister Scott Morrison said the government has been targeted. Pictured: Parliament House in Canberra

Prime Minister Scott Morrison said the government has been targeted. Pictured: Parliament House in Canberra

The cyber attack has resulted in temporary shortages or out-of-stock products in kegs, bottles and cans.

'While our systems are offline, we have worked very hard to be able to supply a limited number of key products to our customers,' a company statement said.

'We will continue to accept and fulfill orders as best we can, using interim manual processes where we need to.' 

An attack on the federal parliament and three largest political parties before the general election last year was earlier this year attributed to China. 

Matt Warren, from RMIT University Centre for Cyber Security Research and Innovation, said cyber attacks were 'the new normal'.

'It's not that there's an increase in cyber-attacks, but we're seeing these attacks be more successful because what they're focusing on is the human aspect,' he told the Geelong Advertiser.

'It also highlights that organisations aren't prepared for it.

Steps to improve cyber security 

Defence Minister Linda Reynolds urged businesses to check their cyber security and take extra steps such as ensuring employees use multi-factor identification to use devices. 

She said: 'Firstly, patch your Internet facing devices promptly, ensuring that any web or email servers are fully updated with the latest software. 

'Secondly, ensure you always use multifactor authentication to secure your Internet access, infrastructure and also your CLOUD-based platforms. 

'Thirdly, it's important to become an ACSC partner to ensure you get the latest cyber threat advice to protect your organisation online.' 

Advertisement

'It's actually a relatively easy cyber attack to recover from, but the problem is because organisations have now become complex, they haven't kept up their backup resilience strategy to reflect their operations.'     

Earlier this week Australia launched six warships into the Indo-Pacific for training operations ahead of huge show of force in the region with the US Navy.

HMA Ships Canberra, Hobart, Stuart, Anzac, Ballarat and Arunta all left their base in Sydney Harbour on Monday.  

They will conduct 'task group training' before taking part in a warfare training exercise with the US and other allies known as the Rim of the Pacific in August.

Australia has launched six warships into the Indo-Pacific for training operations ahead of huge show of force in the region with the US Navy. Pictured: HMA Ships Stuart (foreground), Hobart and Canberra (background) depart Fleet Base East in Sydney

Australia has launched six warships into the Indo-Pacific for training operations ahead of huge show of force in the region with the US Navy. Pictured: HMA Ships Stuart (foreground), Hobart and Canberra (background) depart Fleet Base East in Sydney

Left to right: HMA Ships Stuart, Hobart and Canberra depart Fleet Base East in Sydney for Force Integrated Training

Left to right: HMA Ships Stuart, Hobart and Canberra depart Fleet Base East in Sydney for Force Integrated Training

The exercise is the world's largest international maritime warfare training mission, held every two years from Honolulu, Hawaii. 

A defence spokesman said the ships are 'currently conducting maritime task group training under strict COVID-19 preventive measures'.

It comes amid trade tensions with China after Australia angered Beijing by calling for an inquiry into the origins of coronavirus which erupted in Wuhan.

In recent months China has increased training exercises in the Pacific and started trailing its first homemade aircraft carrier. 

This morning Prime Minster Scott Morrison said China should not be shocked by the show of force. 

'These are our routine partnerships and exercises that we do. There's nothing extraordinary about that,' he told Sydney radio 2GB. 

'I don't think it would cause anyone any surprise who are looking in from elsewhere.'

HMAS Sirius departs Fleet Base West for taskgroup force integrated training

HMAS Sirius departs Fleet Base West for taskgroup force integrated training

Left to right: HMA Ships Canberra, Hobart and Stuart depart Sydney Harbour on Monday

Left to right: HMA Ships Canberra, Hobart and Stuart depart Sydney Harbour on Monday

Advertisement

Huge cyber attack is aimed at the Australian government 

The comments below have not been moderated.

The views expressed in the contents above are those of our users and do not necessarily reflect the views of MailOnline.

What's This?

By posting your comment you agree to our house rules.