![\"\"](\"https:\/\/www.newsbeep.com\/au\/wp-content\/uploads\/2026\/07\/cyberaus-678x381.png\" "\\"cyberaus\\"\/")
<\/p>\n<\/p>\n
The Australian Signals Directorate says defence, energy, communications, healthcare and financial services are being targeted through outdated software, exposed routers and predictable passwords<\/p>\n
The Australian Signals Directorate has issued a new warning about cyber groups linked to Russian intelligence agencies targeting critical infrastructure and strategic industries in Australia.<\/p>\n
The alert was released with almost two dozen international partner agencies and focuses on organisations operating in defence, communications, energy, healthcare and financial services.<\/p>\n
State and local government bodies are also considered particularly vulnerable because of the size and complexity of their digital networks.<\/p>\n
Routers and vulnerable devices targeted<\/p>\n
According to the ASD, the attacks do not necessarily rely on highly sophisticated technology.<\/p>\n
Hackers are searching for routers, switches, laptops and other network devices using outdated software, factory settings or weak passwords.<\/p>\n
Once a vulnerable device is identified, attackers may gain access to the organisation\u2019s network, steal login credentials and move through connected systems in search of sensitive information.<\/p>\n
Links to Russian intelligence services<\/p>\n
The ASD says the activity is associated with cyber groups operating on behalf of Russia\u2019s Federal Security Service, known as the FSB.<\/p>\n
Groups named in the warning include Berserk Bear, Energetic Bear, Crouching Yeti, Dragonfly, Ghost Blizzard and Static Tundra.<\/p>\n
Different security agencies may use different names for the same operators, but the groups have been monitored for years over attacks targeting governments, companies and essential infrastructure.<\/p>\n
A simple but effective method<\/p>\n
Former Australian Cyber Security Centre head Alastair MacGibbon compared the method to someone walking through a neighbourhood and checking which doors have been left unlocked.<\/p>\n
The attackers scan large numbers of internet addresses looking for equipment that has not been updated or is still protected by the manufacturer\u2019s default username and password.<\/p>\n
The approach may appear basic, but it can be extremely effective when carried out on a large scale.<\/p>\n
The danger of remaining undetected<\/p>\n
One of the greatest risks is the amount of time attackers may remain inside a network before the intrusion is discovered.<\/p>\n
The longer a breach goes undetected, the more opportunity hackers have to steal documents, passwords, personal information and details about an organisation\u2019s operations.<\/p>\n
Access may also be used to prepare future attacks, disrupt essential services or create entry points that could be activated during an international crisis.<\/p>\n
Defence, energy and communications at risk<\/p>\n
The targeting of critical infrastructure makes the warning particularly serious.<\/p>\n
A successful attack against an energy provider, telecommunications network or defence organisation could have consequences far beyond the theft of data.<\/p>\n
Even a temporary disruption could affect businesses, transport systems, hospitals and members of the public in a society increasingly dependent on connected digital services.<\/p>\n
Warning coordinated with international allies<\/p>\n
The alert was issued in cooperation with the United States National Security Agency and security bodies in the United Kingdom, New Zealand, Canada, Finland, France and Denmark.<\/p>\n
The involvement of multiple countries indicates that the threat is not limited to Australia but forms part of a broader international campaign against public and private networks.<\/p>\n
Five Eyes countries had already issued a warning about cyber risks associated with artificial intelligence and advised organisations to disconnect systems that do not need to remain online.<\/p>\n
Many devices should not be exposed online<\/p>\n
Experts say many routers used by organisations should be protected behind firewalls and should never be directly accessible from the public internet.<\/p>\n
Some businesses may not know exactly how many devices are connected to their networks or may not realise that certain equipment is visible to external users.<\/p>\n
A single forgotten or outdated device can provide attackers with a pathway into an entire organisation.<\/p>\n
Measures recommended by the ASD<\/p>\n
The Australian Signals Directorate is urging organisations to update the software and firmware on network devices and remove all factory-default credentials.<\/p>\n
Passwords should be long, unique and stored securely. Multi-factor authentication should also be enabled wherever possible.<\/p>\n
Businesses and government bodies are being encouraged to identify which devices are exposed online, review access logs regularly and isolate systems that do not require an external connection.<\/p>\n
A cybercrime report every six minutes<\/p>\n
ASD data shows that a cybercrime report is made in Australia approximately every six minutes.<\/p>\n
Not every incident is linked to a foreign government, but the figure highlights how digital threats have become part of everyday life for citizens, businesses and public institutions.<\/p>\n
State-linked cyber campaigns represent a different level of danger because their objectives may be political, strategic or military as well as financial.<\/p>\n
Cybersecurity begins with the basics<\/p>\n
The warning demonstrates that major cyberattacks do not always begin with advanced or unfamiliar technology.<\/p>\n
Many breaches succeed because software has not been updated, a password has not been changed or a network service has been left unnecessarily exposed.<\/p>\n
For governments and businesses, protecting critical infrastructure begins with basic measures: understanding their systems, installing security updates and preventing vulnerable equipment from remaining visible to attackers.<\/p>\n
fety #AlloraOnline<\/p>\n","protected":false},"excerpt":{"rendered":"The Australian Signals Directorate says defence, energy, communications, healthcare and financial services are being targeted through outdated software,…\n","protected":false},"author":2,"featured_media":799294,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[64,63,44],"class_list":["post-799293","post","type-post","status-publish","format-standard","has-post-thumbnail","category-australia","tag-au","tag-australia","tag-news"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/posts\/799293","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/comments?post=799293"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/posts\/799293\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/media\/799294"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/media?parent=799293"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/categories?post=799293"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/tags?post=799293"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}