Australia sees spike in cyber attacks from criminals and states

The report warned that state-sponsored attackers made cyberspace a 'battleground' and cited attacks from China, Iran and Russian state-linked groups

Cyber attacks against Australia from criminals and state-sponsored groups jumped last financial year, with a government report released on Friday equating the assault to one attack every seven minutes.

The Australian Cyber Security Centre (ACSC) received 76,000 cybercrime reports last financial year, up 13 per cent from the previous period, according to its latest annual cyber threat report.

While just over half of attacks targeted individuals for fraud and theft, the report warned that state-sponsored attackers made cyberspace a "battleground" and cited attacks from China's Ministry of State Security, Iran and Russian state-linked groups.

Multiple attacks against Australian essential services were thwarted over the period, including a November 2021 attack on government-owned utility CS Energy, responsible for a tenth of the nation's electricity output.

"It's not just about the frauds or the texts that you or I might receive, but real issues around the security of our country going forward," Cybersecurity Minister Clare O'Neil told state-owned Australian Broadcasting Company on Friday in reference to the report.

"It is a national security focus of the government."

The ACSC, part of the intelligence-collecting Signals Directorate, reported 95 cyber incidents impacting critical infrastructure last fiscal year.

The third annual report covers the period before high-profile hacks at Australia's second-largest telecoms company Optus, owned by Singapore Telecommunications Ltd , and its biggest health insurer Medibank Private Ltd , which combined compromised some 14 million customer accounts.

The report underscored accusations that the Optus and Medibank hacks were relatively unsophisticated, blaming the majority of major incidents on inadequate software updates.

Experts told Reuters last week a skills shortage is making it harder for Australia's understaffed and overworked cybersecurity specialists to stop breaches.

Business losses attributable to cyber crime rose on average 14 per cent over the period, with the average crime costing a small business A$39,000 ($24,540).

The jump in attacks and damages is making insurers wary and premiums in Australia jumped 56 per cent year-on-year in the second quarter, according to Marsh & McLennan Companies Inc.

($1 = 1.5891 Australian dollars)