State-Linked Cyber Actors Could Face Counter-Attack From Australia: Intelligence Boss

Australia can 'undertake offensive cyber operations like no one else can'

Australia is developing its cyber offensive and defensive capabilities. Anton Balazh/Adobe Stock

The head of Australia’s security and intelligence agency has conveyed a clear message—and threat—that any criminals or state actors seeking to conduct cyber attacks on Australia should be wary of the nation’s counter-offensive capabilities.

Rachel Noble, director-general of the Australian Signals Directorate (ASD)—a government agency responsible for intelligence, cyber security, and offensive operations—said that Australia’s ability to detect and retaliate against cyber attacks now posed a significant threat to malicious actors.

“ASD is increasingly becoming the first and last line of digital defence that protects our country from cyber attacks ... and we are right now fighting that battle with criminals, state actors and serious and organised crime,” Noble said, reported the Australian Associated Press.

“But we do want our adversaries to know that we are here.

“We want them to calculate: Today is not the day.”

Director-General of the Australian Signals Directorate (ASD) Rachel Noble speaks during a Parliamentary inquiry at Parliament House in Canberra, Australia, on Jul. 29, 2021. AAP Image/Lukas Coch

Noble said the strength of Australia’s offensive operations had grown to the point that the nation was now capable of shortening any war it got involved in.

Amid growing tensions over Taiwan and China’s presence in the South China Sea, the formulation of the Australia-United Kingdom-United States—AUKUS—pact has recently seen Australia bolster its quantum technology development, alongside ambitions to enhance its cyber, artificial intelligence, and undersea capabilities.

Noble also said that a quarter of all cyberattacks on Australia had targeted energy, water, telecommunications, health services, and other critical infrastructure.

This included attempts from state actors to gather intelligence or implant bugs and malware capable of denying, degrading, or disrupting the vital services at their discretion.

She said that while Australia would never seek out conflict, its intelligence capabilities allowed the ASD to “undertake offensive cyber operations as no one else can.”

The Australian Cyber Security Centre (ACSC), a department of the ASD, has been Australia’s front line of defence against cyber incidents and has reportedly seen a 13 percent increase in cyber crime in the last 12 months.

In particular, concerns have been mounting as Australia, and other nations have experienced a growing number of attacks on government, hospitals, food producers, communications, media, and educational institutions.

While some of these involve independent ransomware attackers, others have seen offensive action from state-based actors, such as the Russia-linked SolarWinds attack and the China-linked Microsoft email server attack.

Discussions between former director of the United States National Security Agency (NSA), Keith Alexander, and ACSC Head Abigail Bradshaw highlighted that current offences taken against Australia and other countries had often gone unpunished.

“We have to attribute who’s doing it and make them pay a price right now,” Alexander previously said. “The ransomware guys, and Russia, predominantly get off pretty much free.”

Former commander of U.S. Cyber Command and director of the National Security Agency (NSA) General Keith Alexander speaks during the fourth annual Cybersecurity Summit September 25 at the National Press Club in Washington, DC. Cyberespionage for economic gain is sapping intellectual property from U.S. businesses. Alex Wong/Getty Images

“Imagine if we indicted [them] and put their picture up and said ‘that’s the guy,’” Alexander said. “And if we can, we will arrest you. You can’t move out of Russia, you’re going to have to stay there for the rest of your life … we got you. We know who you are.”

Alexander suggested a radar-like mechanism that would show cyber attacks across private and public industries that could be shared with allies to create a bigger picture and respond accordingly.

However, Alexander raised concern that, currently, attacks on the private sector were difficult to detect.

“I think the biggest problem that I faced in government, and that we face today, is governments—not just ours, but yours as well—can’t see attacks on the private sector. Yet the government is responsible for defending the private sector,” Alexander said.

This is set to change in Australia with a new critical infrastructure bill that seeks to fortify Australia’s critical infrastructure against cyber attacks by mandating incident reporting for organisations.

While receiving positive feedback, an inquiry into the bill angered big tech as the new laws could, in some instances, see the government install their own cyber security software onto their systems.