Australia says 'state actor' hacked parties, Parliament

China says speculation it was behind hacking is irresponsible and a bid to smear country

SPH Brightcove Video
Australian Prime Minister Scott Morrison says that a cyber attack on Australian lawmakers breaching networks of major political parties was probably carried out by a foreign government.
Australia's Parliament in session. Canberra this month reported a "security incident on the parliamentary computing network", leading to Cabinet members changing their passwords and taking other security measures.
Australia's Parliament in session. Canberra this month reported a "security incident on the parliamentary computing network", leading to Cabinet members changing their passwords and taking other security measures. PHOTO: EPA-EFE

SYDNEY • Australia yesterday said a "sophisticated state actor" had hacked the country's main political parties and Parliament, just weeks before a closely fought election.

Prime Minister Scott Morrison told lawmakers that investigators looking into a hack of Parliament computer systems revealed two weeks ago "also became aware that the networks of some political parties" had been breached.

"Our cyber experts believe a sophisticated state actor is responsible for this malicious activity."

Australian security agencies said they did not know who was behind the attack or their motives.

It is not yet clear what, if any, material was stolen, how long the perpetrators went undetected, or whether the hack could open some political figures up for blackmail.

Earlier this month, Australia reported a "security incident on the parliamentary computing network".

That forced users - including the prime minister and the Cabinet - to change passwords and take other security measures.

Experts warn that attribution is time-consuming and difficult.

"I think it's definitely too early to say," said Mr Fergus Hanson, a cyber-security expert at the Australian Strategic Policy Institute, adding that there are only "one or two actors" capable of carrying out such an attack.

Mr Hanson said he would put China "at the top" of the list of possible suspects, but "wouldn't rule out" Russia's involvement.

Chinese Foreign Ministry spokesman Geng Shuang said such speculation about Beijing was "irresponsible" and an attempt to "smear" the country.

"When investigating network breaches, there should be sufficient evidence, unreasonable guesses can't be made," Mr Geng said at a regular press briefing in Beijing.

He urged the media to "stop using so-called cyber leaks and hacking attacks to discredit China and stop compromising China's interests and China's bilateral relations with the countries concerned".

Beijing and Canberra have sparred over access to natural resources, maritime claims and the use of Chinese state-backed technology companies.

Bilateral relations have recently been frayed over Australia's decision to ban Huawei from the country's 5G network amid national security concerns and the expulsion of Mr Huang Xian, a connected billionaire who doled out millions in Australian political donations.

Australians are expected to go to the polls mid-May, raising the spectre that hackers could be trying to influence the outcome of the vote, or change the tenor of the debate.

Both Russia and China have used cyber operations in a bid to influence democratic votes.

Beijing's spies have been accused of targeting Taiwanese officials before the election there last year.

Dozens of Russians have been indicted for trying to tilt the 2016 US presidential election, and alleged Russian involvement in Britain's referendum on leaving the European Union in the same year has been documented. Moscow has denied the accusations.

As part of the Five Eyes intelligence network - which also includes Britain, Canada, New Zealand and the United States - Australia is a particularly rich target for foreign interests. Australia also has access to intelligence to back up any suspicions of state hacking.

"Our political institutions represent high-value targets. But we have resilient systems in place to detect compromises and remediate them," said Mr Alastair MacGibbon, head of the Australian Cyber Security Centre. He said his organisation has already briefed electoral commissions across the country and could be deployed to provide technical support to those affected.

Mr Morrison insisted, however, that "there is no evidence of any electoral interference".

"We have put in place a number of measures to ensure the integrity of our electoral system."

AGENCE FRANCE-PRESSE

Join ST's Telegram channel and get the latest breaking news delivered to you.

A version of this article appeared in the print edition of The Straits Times on February 19, 2019, with the headline Australia says 'state actor' hacked parties, Parliament. Subscribe