10 Million Records Compromised
The hackers have lifted nearly 10 million customer records from Medibank, the insurer, with nearly 20% of those coming from international customers, CNN reported. The files include health claims data for almost half a million people, including 20,000 international credentials.The cyber crew in the Medibank score is reportedly the notorious REvil, the same Russian-linked group that took down meat processor JBS earlier last year, two food distributors and other big fishh. REvil has already begun to release batches of the data on the dark web, CNN said. REvil has also been fingered for attacks on thousands of managed security service providers (MSSPs) and managed service providers (MSPs), transportation companies. REvil is suspected of authoring the Grandcrab ransomware-as-service.Aussies Want to Hack the Hackers
What is particularly interesting about this latest campaign is Australian Cybersecurity Minister Clare O’Neil’s vow to “hack the hackers,” rather than just ramping up defenses, as the Washington Post reported. Her promise to fight back with cyberattacks mirrors in some ways how the U.S. has responded to REvil and other subsequent attackers.Late last week, Australian Prime Minister Anthony Albanese said that the government of the country the hackers come from should be held accountable. Albanese told CNN:“The nation where these attacks are coming from should also be held accountable for the disgusting attacks, and the release of information including very private and personal information.”
Telecom Carrier Hit
In late September, hackers also hit telecom carrier Singtel Optus, the second largest carrier in Australia with more than 10 million customers. It's unknown who carried out the Optus operation.Optus subsequently rebuilt the data set that was exposed, which was “no small feat,” the company said in a letter to customers.Both attacks cut through Australian infrastructure, duplicating to a degree the assaults REvil has carried out in the U.S. and Europe, officials said.Australian Federal Police (AFP) Commissioner Reece Kershaw told reporters investigators know the identity of the individuals responsible for the attack on health insurer Medibank, but he declined to name them, CNN reported.Kershaw put the cyber crooks on notice:“To the criminals, we know who you are. And moreover, the AFP has some significant runs on the scoreboard when it comes to bringing overseas offenders back to Australia to face the justice system. The AFP is undertaking covert measures and working around the clock with our domestic agencies and international networks including Interpol. This is important because we believe those responsible for the breach are in Russia."
More Hacks Reported
Australia is no stranger to cyberattacks. Late last year, reports surfaced that a little-known breach by Huawei into an Australian telecom company conducted nearly a decade ago used a malware-laded software patch to infiltrate the carrier’s networks. The malicious code reportedly scrubbed itself from systems after a few days. It worked like a digital wiretap, transmitting information back to China.In January 2021, cyber swindlers masquerading as Australian Cyber Security Centre (ACSC) officials lured unsuspecting victims to hand over their personal credentials. The agency issued a warning over this malevolent phishing campaign.Cyber War Is On
Along with other countries, particularly the U.S., Australia has regularly promised to chase down hackers and bring them to justice. In the U.S. last June, Cyber Command (CyberCom) Director Gen. Paul Nakasone said the U.S. had conducted offensive cyber operations in support of Ukraine as it tries to fend off Russian aggression. Nakasone’s remarks were the first official announcement by the U.S. that it is involved in cyber activities in support of Ukraine.“We’ve conducted a series of operations across the full spectrum: offensive, defensive, information operations,” he said in an interview with Sky News.In September 2021, Nakasone told attendees at the National Security Summit to expect U.S. intelligence and national security to mount a “surge” against nation-state sponsors of cyberattacks.Nakasone, who also heads the National Security Agency (NSA), first signaled his intention to adopt a more aggressive cybersecurity stance three years ago but lacked a definitive adversary. Now, prompted by a series of blows landed by ransomware attackers, particularly Russian-backed operatives, cyber hijacking is a clear threat to national security, he said.Nakasone advised on the implications:“Even six months ago we probably would have said, ‘Ransomware, that’s criminal activity’. But if it has an impact on a nation, like we’ve seen, then it becomes a national security issue. If it’s a national security issue, then certainly we’re going to surge toward it.”