Annual Cyber Threat Report, July 2021- June 2022

I am pleased to present the third Annual Cyber Threat Report by the Australian Cyber Security Centre (ACSC), a key part of the Australian Signals Directorate (ASD).

Throughout its 75 year history, ASD has defended Australia from global threats and advanced our national interests. It remains at the frontline of defending our nation and keeping Australia safe and secure.

We are currently witnessing deteriorating strategic circumstances in our region and globally, including a military build-up unseen since World War II, and expanding cyber and grey zone capabilities are of particular concern.

In this environment, the work performed by ASD and its ACSC is more important than ever.

This expanded Annual Cyber Threat Report 2021–22 is the product of insights from across the Commonwealth, with the Australian Federal Police, the Australian Criminal Intelligence Commission and the Australian Security Intelligence Organisation also contributing to help all Australians better understand the cyber threat environment and lift their cyber defences.

Over the last financial year and reflecting strategic competition globally, we have all witnessed a heightened level of malicious cyber activity. Regrettably, too many Australians have also felt its impacts.

The government considers cyber security and reinforcing our online resilience to be a national priority. Increased investment in ASD’s cyber and intelligence capabilities under project REDSPICE (Resilience, Effects, Defence, SPace, Intelligence, Cyber, Enablers) positions Australia to lift our defences and recognises the critical role ASD plays in our national security.

This report maps how threat actors across the world have continued to find innovative ways to deploy online attacks, with supply chains used to penetrate cyber defences of governments and organisations in many countries, including Australia.

The better news is that with increased collaboration across industry, small business, and government—and with all Australians—our joint cybersecurity future and the digital opportunities before us remain bright.

In many ways, this report is the product of all Australians with its foundations and findings formed by reports to the ACSC. Reporting cybercrime is vital for us to build a threat picture that can prevent others from falling victim to the ransomware syndicates and cybercriminals. The best cyber defence is informed by the best intelligence.

Together we can reach our ambitious goal to make Australia truly the most secure place to connect online. This report is another important step forward.

The Hon Richard Marles, MP
Deputy Prime Minister and Minister for Defence