--- title: "Surge in Cyber Threats: Australian Organisations Under Siege" description: Discover the latest in cyber threats impacting Australian organisations, including ransomware, phishing, and nation-state attacks, and learn essential mitigation strategies. image: https://digitalfrontierpartners.com.au/hubfs/AI-Generated%20Media/Images/The%20image%20showcases%20a%20digital%20landscape%20filled%20with%20abstract%20representations%20of%20cybersecurity%20threats%20In%20the%20foreground%20a%20darkened%20silhouette%20of%20a%20city%20skyline%20symbolizes%20urban%20vulnerabilities%20while%20ominous%20clouds%20loom%20overhead%20hinting%20at%20impending%20d.jpeg --- [Skip to content](https://digitalfrontierpartners.com.au/news/surge-in-cyber-threats-australian-organisations-under-siege#main-content) [![](https://digitalfrontierpartners.com.au/hs-fs/hubfs/DFP-Logo.webp?width=1200&height=342&name=DFP-Logo.webp)](https://www.digitalfrontierpartners.com.au/) - [Services](https://digitalfrontierpartners.com.au/news/surge-in-cyber-threats-australian-organisations-under-siege#products) Show submenu for Services - [Cybersecurity](https://digitalfrontierpartners.com.au/cybersecurity-services-24/7-threat-monitoring-and-response-dfp) - [Due Diligence](https://digitalfrontierpartners.com.au/technology-due-diligence-product-assessment-digital-frontier-partners) - [Enterprise AI](https://digitalfrontierpartners.com.au/enterprise-ai) - [Technology Advisory](https://digitalfrontierpartners.com.au/technology-advisory-services-digital-frontier-partners) - [Workforce Optimisation](https://digitalfrontierpartners.com.au/workforce-optimisation-ai-driven-cost-control-and-performance-dfp) - Resources Show submenu for Resources - [News](https://digitalfrontierpartners.com.au/news/tag/news) - [Case Studies](https://digitalfrontierpartners.com.au/news/tag/case-study) - [Research](https://digitalfrontierpartners.com.au/news/tag/research) - [Weekly Cyber Reports](https://digitalfrontierpartners.com.au/news/tag/weekly-cyber-reports) - [About](https://digitalfrontierpartners.com.au/news/surge-in-cyber-threats-australian-organisations-under-siege#about) Show submenu for About - [About Us](https://digitalfrontierpartners.com.au/about) - [Contact Us](https://digitalfrontierpartners.com.au/contact) Open main navigation Close main navigation - [Services](https://digitalfrontierpartners.com.au/news/surge-in-cyber-threats-australian-organisations-under-siege#products) Show submenu for Services - [Cybersecurity](https://digitalfrontierpartners.com.au/cybersecurity-services-24/7-threat-monitoring-and-response-dfp) - [Due Diligence](https://digitalfrontierpartners.com.au/technology-due-diligence-product-assessment-digital-frontier-partners) - [Enterprise AI](https://digitalfrontierpartners.com.au/enterprise-ai) - [Technology Advisory](https://digitalfrontierpartners.com.au/technology-advisory-services-digital-frontier-partners) - [Workforce Optimisation](https://digitalfrontierpartners.com.au/workforce-optimisation-ai-driven-cost-control-and-performance-dfp) - Resources Show submenu for Resources - [News](https://digitalfrontierpartners.com.au/news/tag/news) - [Case Studies](https://digitalfrontierpartners.com.au/news/tag/case-study) - [Research](https://digitalfrontierpartners.com.au/news/tag/research) - [Weekly Cyber Reports](https://digitalfrontierpartners.com.au/news/tag/weekly-cyber-reports) - [About](https://digitalfrontierpartners.com.au/news/surge-in-cyber-threats-australian-organisations-under-siege#about) Show submenu for About - [About Us](https://digitalfrontierpartners.com.au/about) - [Contact Us](https://digitalfrontierpartners.com.au/contact) - [Contact us](https://digitalfrontierpartners.com.au/contact) [Contact us](https://digitalfrontierpartners.com.au/contact) 4 August 2025 12:09:22 PM # Surge in Cyber Threats: Australian Organisations Under Siege ![Picture of Digital Frontier Partners](https://digitalfrontierpartners.com.au/hs-fs/hubfs/500x%20DFP%20(3).png?width=50&name=500x%20DFP%20(3).png) [Digital Frontier Partners](https://digitalfrontierpartners.com.au/news/author/digital-frontier-partners) As cyber threats continue to evolve, the past week has seen a surge in sophisticated attacks and vulnerabilities with direct implications for Australian organisations. From nation-state actors to ransomware gangs, the landscape is increasingly complex and demands heightened vigilance. ### Executive Overview Globally, threat actors have exploited newly patched zero-day vulnerabilities in Microsoft SharePoint servers, with Chinese APT groups targeting over 400 organisations. These attacks raise concerns for Australian supply chains that rely on similar infrastructure. Meanwhile, the Chaos ransomware group has resurfaced, deploying advanced encryption and targeting U.S. entities—posing spillover risks for Australian businesses. Locally, a Northern Territory government agency fell victim to a $3.5 million business email compromise (BEC) scam, underscoring vulnerabilities in email and payment systems. Malware campaigns such as “Shuyal” have compromised credentials across 19 browsers, while spyware-laden fake apps continue to target users in South Korea and Asia. Phishing tactics have grown more sophisticated, with payload-less techniques and typosquatted domains bypassing traditional defences. Critical infrastructure remains under threat, particularly VMware ESXi environments, as ransomware groups leverage social engineering to bypass multi-factor authentication and exfiltrate sensitive data. ### Critical Vulnerabilities and Exploits Several high-severity vulnerabilities have emerged: - Microsoft SharePoint flaws (CVE-2025-49706 and CVE-2025-49704) are actively exploited, enabling remote code execution and spoofing. - PaperCut NG/MF’s CSRF vulnerability (CVE-2025-2533) allows attackers to manipulate admin settings. - Cisco Identity Services Engine vulnerabilities permit root-level command execution. - Tridium’s Niagara Framework and Delta Electronics DTN Soft have exposed industrial systems to remote code execution and unauthorised access. - Linux PAM and XWiki vulnerabilities present privilege escalation and SQL injection risks. These issues highlight the urgent need for patching, network isolation, and robust authentication protocols. ### Ransomware and Data Breaches Ransomware activity remains aggressive. Allianz Life suffered a breach affecting 1.4 million customers due to a compromised third-party CRM. In Australia, the aforementioned BEC scam exploited insecure access mechanisms, redirecting payments to fraudulent accounts. Chaos ransomware has adopted double-extortion tactics, demanding ransoms up to $300,000. Scattered Spider continues to target VMware ESXi hypervisors, while Aeroflot faced a massive ransomware attack disrupting 7,000 servers. The Gunra ransomware’s Linux variant enables rapid parallel encryption, threatening sectors like healthcare and IT. ### Nation-State and APT Activity Nation-state actors have intensified operations: - Russia-linked Secret Blizzard uses adversary-in-the-middle techniques to target foreign embassies, including Australian interests. - China-backed Silk Typhoon exploits zero-day vulnerabilities in Microsoft Exchange and SharePoint, with tools developed for espionage and mobile forensics. - Scattered Spider, identified as UNC3944, targets critical infrastructure using social engineering and MFA exploitation. These campaigns demonstrate the geopolitical dimensions of cyber threats and the need for resilient defences across Australian infrastructure. ### Phishing and Social Engineering Phishing attacks are increasingly deceptive. Scattered Spider impersonates employees to trick IT helpdesks into transferring MFA tokens. Fake apps and typosquatted domains continue to harvest credentials, while link wrapping services bypass MFA protections. Australian organisations must adopt phishing-resistant MFA, enhance endpoint monitoring, and implement comprehensive social engineering awareness programs. ### Industrial Infrastructure Risks CISA advisories have flagged vulnerabilities in Delta Electronics, Samsung HVAC, Fuji Electric, and Tridium systems. These flaws enable code execution, data exfiltration, and operational disruption. The ACSC has echoed concerns, particularly around ransomware actors targeting infrastructure sectors. Mitigation strategies include network segmentation, patching, and strict access controls. Australian entities in manufacturing, energy, and critical services must prioritise these measures to safeguard infrastructure integrity. [Weekly Cyber Reports](https://digitalfrontierpartners.com.au/news/tag/weekly-cyber-reports) ## Related posts [![](https://digitalfrontierpartners.com.au/hs-fs/hubfs/AI-Generated%20Media/Images/The%20image%20depicts%20a%20digital%20landscape%20filled%20with%20ominous%20shadows%20and%20abstract%20representations%20of%20cyber%20threats.jpeg?height=200&name=The%20image%20depicts%20a%20digital%20landscape%20filled%20with%20ominous%20shadows%20and%20abstract%20representations%20of%20cyber%20threats.jpeg)](https://digitalfrontierpartners.com.au/news/global-cyber-threats-surge-supply-chain-attacks-nation-state-espionage-and-iot-vulnerabilities-define-the-week) ## [Global Cyber Threats Surge: Supply Chain Attacks, Nation-State Espionage, and IoT Vulnerabilities Define the Week](https://digitalfrontierpartners.com.au/news/global-cyber-threats-surge-supply-chain-attacks-nation-state-espionage-and-iot-vulnerabilities-define-the-week) 27 January 2025 10:15:00 AM [Read more](https://digitalfrontierpartners.com.au/news/global-cyber-threats-surge-supply-chain-attacks-nation-state-espionage-and-iot-vulnerabilities-define-the-week) [![](https://digitalfrontierpartners.com.au/hs-fs/hubfs/Screenshot%202025-02-02%20at%2010.16.01%20AM.png?height=200&name=Screenshot%202025-02-02%20at%2010.16.01%20AM.png)](https://digitalfrontierpartners.com.au/news/global-cybersecurity-alert-state-sponsored-attacks-and-new-malware-threats) ## [Global Cybersecurity Alert: State-Sponsored Attacks and New Malware Threats](https://digitalfrontierpartners.com.au/news/global-cybersecurity-alert-state-sponsored-attacks-and-new-malware-threats) 6 January 2025 9:45:00 AM [Read more](https://digitalfrontierpartners.com.au/news/global-cybersecurity-alert-state-sponsored-attacks-and-new-malware-threats) [![](https://digitalfrontierpartners.com.au/hs-fs/hubfs/AI-Generated%20Media/Images/The%20image%20depicts%20a%20hightech%20cybersecurity%20operations%20center%2c%20bathed%20in%20dim%20blue%20light.jpeg?height=200&name=The%20image%20depicts%20a%20hightech%20cybersecurity%20operations%20center%2c%20bathed%20in%20dim%20blue%20light.jpeg)](https://digitalfrontierpartners.com.au/news/evolving-cyber-threats-state-sponsored-attacks-ai-powered-phishing-and-ransomware-surge-globally) ## [Evolving Cyber Threats: State-Sponsored Attacks, AI-Powered Phishing, and Ransomware Surge Globally](https://digitalfrontierpartners.com.au/news/evolving-cyber-threats-state-sponsored-attacks-ai-powered-phishing-and-ransomware-surge-globally) 13 January 2025 9:30:00 AM [Read more](https://digitalfrontierpartners.com.au/news/evolving-cyber-threats-state-sponsored-attacks-ai-powered-phishing-and-ransomware-surge-globally) ###### Visit Us On: [linkedin-in icon](https://www.linkedin.com/company/digitalfrontierpartners/posts/?feedView=all) [Follow us on Facebook](https://www.youtube.com/watch?v=-BsUxioXzCk&t=6s) --- [![](https://digitalfrontierpartners.com.au/hs-fs/hubfs/DFP-Logo.webp?width=1200&height=342&name=DFP-Logo.webp)](https://digitalfrontierpartners.com.au/) Level 4, 350 Collins St, Melbourne VIC, Australia 3000 +61 [1800 288 817](https://www.google.com/search?q=digital+frontier+partners&oq=digital+&gs_lcrp=EgZjaHJvbWUqDwgAECMYJxjjAhiABBiKBTIPCAAQIxgnGOMCGIAEGIoFMhUIARAuGCcYrwEYxwEYgAQYigUYjgUyBggCEEUYOTIMCAMQABhDGIAEGIoFMgwIBBAAGEMYgAQYigUyBggFEEUYPDIGCAYQRRg8MgYIBxBFGDzSAQg0MzQ1ajBqN6gCALACAA&sourceid=chrome&ie=UTF-8#) Company   - [Home](https://digitalfrontierpartners.com.au/hp) - [About Us](https://digitalfrontierpartners.com.au/about) - [Careers](https://digitalfrontierpartners.zohorecruit.com.au/jobs/Careers) - [Contact Us](https://digitalfrontierpartners.com.au/contact) --- Resources - [News](https://digitalfrontierpartners.com.au/news) - [Research](https://digitalfrontierpartners.com.au/news) - [Weekly Cyber Report](https://digitalfrontierpartners.com.au/news) - [Case Studies](https://digitalfrontierpartners.com.au/news) --- Policies - [Privacy Policy](https://digitalfrontierpartners.com.au/news/privacy-policy) - [Information Security Policy](https://digitalfrontierpartners.com.au/news/information-security-policy) - [Quality Policy](https://digitalfrontierpartners.com.au/news/quality-policy) Products and Services - [Cybersecurity](https://digitalfrontierpartners.com.au/cybersecurity-services-24/7-threat-monitoring-and-response-dfp) - [Due Diligence](https://digitalfrontierpartners.com.au/technology-due-diligence-product-assessment-digital-frontier-partners) - [Enterprise Artificial Intelligence (AI)](https://digitalfrontierpartners.com.au/enterprise-ai) - [Technology Advisory](https://digitalfrontierpartners.com.au/technology-advisory-services-digital-frontier-partners) - [Workforce Optimisation](https://digitalfrontierpartners.com.au/workforce-optimisation-ai-driven-cost-control-and-performance-dfp) --- Industries - [Local Government](https://digitalfrontierpartners.com.au/localgovernment-cybersecurity) - [Financial Services Cyber Security](https://digitalfrontierpartners.com.au/financialservices) - [Financial Services Artificial Intelligence](https://digitalfrontierpartners.com.au/financial-services-artificial-intelligence) - [Mid Market Enterprise AI](https://digitalfrontierpartners.com.au/enterprise-artificial-intelligence) - [Aged Care Roster Optimisation](https://digitalfrontierpartners.com.au/aged-care-rostering-optimisation) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Digital Frontier Partners", "url" : "https://digitalfrontierpartners.com.au/news/author/digital-frontier-partners" }, "dateModified" : "2025-08-04T02:09:22.807Z", "datePublished" : "2025-08-04T02:09:22.000Z", "headline" : "Surge in Cyber Threats: Australian Organisations Under Siege", "image" : [ "https://digitalfrontierpartners.com.au/hubfs/AI-Generated%20Media/Images/The%20image%20showcases%20a%20digital%20landscape%20filled%20with%20abstract%20representations%20of%20cybersecurity%20threats%20In%20the%20foreground%20a%20darkened%20silhouette%20of%20a%20city%20skyline%20symbolizes%20urban%20vulnerabilities%20while%20ominous%20clouds%20loom%20overhead%20hinting%20at%20impending%20d.jpeg" ], "mainEntityOfPage" : { "@id" : "https://digitalfrontierpartners.com.au/news/surge-in-cyber-threats-australian-organisations-under-siege", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://digitalfrontierpartners.com.au/hubfs/DFP-Logo.webp" } } } ``` ```json { "@context" : "https://schema.org", "@id" : "https://digitalfrontierpartners.com.au/#organisation", "@type" : "Organization", "address" : { "@type" : "PostalAddress", "addressCountry" : "AU", "addressLocality" : "Melbourne", "addressRegion" : "VIC", "postalCode" : "3000", "streetAddress" : "Level 4, 350 Collins Street" }, "description" : "Digital Frontier Partners provides enterprise technology advisory, AI enablement, workforce optimisation and cybersecurity services, helping organisations align strategy, value and risk.", "email" : "contact@digitalfrontierpartners.com", "knowsAbout" : [ "Enterprise AI enablement", "Artificial intelligence strategy", "AI governance and risk", "Workforce optimisation", "Cybersecurity", "Technology due diligence", "Digital transformation" ], "logo" : { "@type" : "ImageObject", "contentUrl" : "https://digitalfrontierpartners.com.au/hs-fs/hubfs/DFP-Logo.webp?width=1200&height=342&name=DFP-Logo.webp", "height" : 342, "width" : 1200 }, "name" : "Digital Frontier Partners", "telephone" : "+61 1800 288 817", "url" : "https://digitalfrontierpartners.com.au/" } ``` ```json { "@context" : "https://schema.org", "@id" : "https://digitalfrontierpartners.com.au/#website", "@type" : "WebSite", "inLanguage" : "en-AU", "name" : "Digital Frontier Partners", "publisher" : { "@id" : "https://digitalfrontierpartners.com.au/#organisation" }, "url" : "https://digitalfrontierpartners.com.au/" } ```