The Times Australia
The Times World News

.
Times Media

.

A new cyber taskforce will supposedly 'hack the hackers' behind the Medibank breach. It could put a target on Australia's back

  • Written by Mamoun Alazab, Associate Professor, College of Engineering, IT and Environment, Charles Darwin University
A new cyber taskforce will supposedly 'hack the hackers' behind the Medibank breach. It could put a target on Australia's back

The Australian government is launching an offensive against cybercriminals, following a data breach that has exposed millions of people’s personal information.

On November 12, Minister for Cyber Security Clare O'Neil announced a taskforce[1] to “hack the hackers” behind the recent Medibank data breach.

The taskforce will be a first-of-its-kind permanent, joint collaboration between Australian Federal Police and the Australian Signals Directorate. Its 100 or so operatives will use the same cyber weapons and tactics as cybercriminals use, to hunt them down and eliminate them as a threat.

Details on how the taskforce will operate remain murky, partly because it needs to keep this information away from criminals. But the fact remains that taking an offensive stance, while it could deter further attacks, could also put a big red cross on Australia’s back.

Australia punches back

It was only in 2016 that the Australian government first publicly acknowledged[2] it has offensive cyber capabilities[3] housed in the Australian Signals Directorate – and that these are used against offshore cybercriminals. The admission came from then prime minister, Malcolm Turnbull, following attacks on the Bureau of Meteorology and Department of Parliamentary Services.

Australia has used cyber offensive[4] strategies a number of times in the past. This has included operations against[5] ISIS and, more recently, efforts to disable scammers’ infrastructure[6] and access to stolen data at the start of the pandemic. Details of intelligence operations are generally kept under wraps, especially where the Australian Signals Directorate is involved.

How might the taskforce operate?

Minister O'Neil has said the new taskforce will[7]:

scour the world, hunt down the criminal syndicates and gangs who are targeting Australia in cyber attacks and disrupt their efforts.

As to whether it could launch a counterattack on the Medibank hackers, the resources are there, but working out the kinks will be crucial. Australia’s intelligence agencies have more resources than the average organised cyber gang, not to mention connections to other advanced intelligence agencies around the world.

However, one key issue with holding cybercriminals to account is attribution. A legitimate counterattack requires identifying the source of an attack beyond reasonable doubt. The Medibank data leak has been attributed to criminals based in Russia – most likely from, or at least associated with, the REvil cyber gang.

This assumption is based on similarities between existing REvil sites on the dark web and the extortion site hosting the stolen Medibank data, as well as other similarities between the Medibank attack and REvil’s previous attacks.

Read more: What do we know about REvil, the Russian ransomware gang likely behind the Medibank cyber attack?[8]

That said, hackers can hide their identity by routing through (often unaware) third parties. So even if this attack is attributable to REvil, or its close associates, the attackers could easily deny involvement if taken to court.

The group could say its systems were used as unwitting hosts by another external perpetrator. Plausible deniability can almost always be maintained in such cases. Russia (and China) have had a track record[9] of denying involvement in cyber espionage.

As such, it’s very difficult to prosecute cybercriminals – especially in cases where these criminals may be backed (officially or unofficially) by their government[10]. And if perpetrators can’t be put behind bars, they can simply lie low for a while before popping up somewhere else in cyberspace.

Beyond the Medibank hackers, the taskforce will also target other potential threats to Australia. In the case of inaccurate attribution in any of these operations, we might see tit-for-tat escalation. In a worst-case scenario, attacks based on incorrect attribution could start a cyberwar with another country.

Read more: Medibank hackers are now releasing stolen data on the dark web. If you're affected, here's what you need to know[11]

Defence before offence

By actively seeking and trying to neutralise offshore gangs, Australia will put a target on its back. Russian-linked criminal gangs and others might be encouraged to retaliate and target our sectors, including critical infrastructure.

Boosting Australia’s cyber defences should be the top priority – arguably more so than retaliating. Especially since, even if the taskforce successfully mounts a counterattack on the Medibank hackers, it’s unlikely to recover any data stolen (since criminals make copies of stolen data).

Going after cybercriminals addresses the symptoms of the problem, not the root: the fact that our systems were vulnerable enough to be hacked in the first place. The Medibank breach, and the major Optus breach[12] preceding it, have both demonstrated that even businesses with seemingly strong cybersecurity protocols are vulnerable to attacks.

The best option from a rational and technical standpoint is to prevent, as much as possible, data being stolen in the first place. It might not be as flashy a solution, but it’s the best one in the longer term.

Read more https://theconversation.com/a-new-cyber-taskforce-will-supposedly-hack-the-hackers-behind-the-medibank-breach-it-could-put-a-target-on-australias-back-194532

The Times Features

Group Adventures Made Easy: How to Coordinate Shuttle Services from DCA to IAD

Traveling as a large group can be both exciting and challenging, especially when navigating busy airports like DCA (Ronald Reagan Washington National Airport) and IAD (Washington...

From Anxiety to Assurance: Proven Strategies to Support Your Child's Emotional Health

Navigating the intricate landscape of childhood emotions can be a daunting task for any parent, especially when faced with common fears and anxieties. However, transforming anxie...

The Rise of Meal Replacement Shakes in Australia: Why The Lady Shake Is Leading the Pack

Source Meal replacement shakes are having a moment in Australia, and it’s not hard to see why. They’re quick, convenient, and packed with nutrition, making them the perfect solu...

HCF’s Healthy Hearts Roadshow Wraps Up 2024 with a Final Regional Sprint

Next week marks the final leg of the HCF Healthy Hearts Roadshow for 2024, bringing free heart health checks to some of NSW’s most vibrant regional communities. As Australia’s ...

The Budget-Friendly Traveler: How Off-Airport Car Hire Can Save You Money

When planning a trip, transportation is one of the most crucial considerations. For many, the go-to option is renting a car at the airport for convenience. But what if we told ...

Air is an overlooked source of nutrients – evidence shows we can inhale some vitamins

You know that feeling you get when you take a breath of fresh air in nature? There may be more to it than a simple lack of pollution. When we think of nutrients, we think of t...

Times Magazine

Australians are NOT getting enough sleep

With lighter Spring days and Daylight Savings quickly approaching, Aussies are about to face an additional disruption to their sleep routines. Losing an hour of sleep and adjusting to later daylight hours can disrupt the body’s circadian rhythms...

THE AMAZING PERKS OF PIPE RELINING IN PLUMBING

While most people know the significance of prompt pipe repairs, they also recognize how laborious and time-consuming the entire procedure can be. Digging is required during traditional repair procedures for the plumbers to access the pipelines, r...

Tinseltown - Keeping up with the Kardashians no more: the complicated legacy of reality’s first family

Kim Kardashian West has announced to her 160m followers on Instagram that Keeping Up with the Kardashians will end after its next season. The Kardashians, particularly Kim, have been at the centre of cultural debates and controversies for 13 yea...

Full Accident History Is Now Available on VinFocs

Buying a car is an important and responsible step to which you need to find an approach. It's always possible to buy a new car from the showroom, but used cars are in excellent condition. But did you know that a car after an accident is usually c...

Meet the Red Golden Retriever – Your New Furry Friend!

"Life becomes more beautiful when you have a red golden retriever wagging its tail next to you."  We're going to tell you about our adorable Red Golden Retriever today, who has somewhat red fur.  Red-furred canines are a forgotten treasure in the...

Discover the Top 10 Dentists in Darwin, Australia for 2023

Are you on the hunt for the finest dentists in Darwin, Australia? You've landed in the right place. We've meticulously curated a list of the top 10 dental professionals in the city, taking into account patient reviews, experience, qualifications...