GCSB finds links between cyber attacks and Russia

A New Zealand spy agency has found links between the Russian Government and a campaign of malicious cyber activity – however it appears New Zealand organisations haven’t been targeted.

The Government Communications Security Bureau (GCSB) said in a statement that after a ‘‘robust attribution process’’ four international malicious cyber incidents had been linked to the Russian Government.

Prime Minister Jacinda Ardern didn’t go as far as to condemn Russia’s actions, instead saying the ‘‘evidence’’ directly linking Russia to four cyber attacks was not surprising.

She said ‘‘others’’ needed to play by the rules and New Zealand should stand up and ‘‘call out behaviour like cyber security attacks, when they occur’’.

‘‘New Zealand has not been the target here. It has not affected us, or any New Zealand firm, or business, but it highlights again why we need to make sure that our cyber security is up to scratch, is up to standard and the need to be vigilant.

‘‘Cyber security is a threat, globally, and is a significant issue that whilst hasn’t affected us directly, in these circumstances, has the potential to.

‘‘I think it’s about making sure we address any vulnerabilities in our system generally, regardless of who might be the perpetrator.’’

Director General Andrew Hampton said the nature of these campaigns was complex.

‘‘The GCSB’s assessment found it was highly likely the Russian military General Staff Main Intelligence Directorate (GRU) was behind the campaigns and that a number of cyber proxy groups associated with these incidents are actors of the Russian state.

‘‘Our process considered material from our partners and our own cyber threat analysis.’’

The malicious cyber activity primarily targeted overseas political institutions, businesses, media and sporting organisations.

The GCSB statement comes in the wake of the UK’s National Cyber Security Centre announcement, yesterday, when the GRU was assessed to be behind the activity.

‘‘These malicious cyber activities serve no legitimate national security interest. They were designed to negatively impact on the ability of people around the world to go about their daily lives free from interference,’’ Hampton said.

He said the behaviour was unacceptable and ran counter to New Zealand’s vision for an open, safe and secure cyberspace.

‘‘New Zealand organisations were not directly affected by these malicious cyber activities. We are, however, seeing a range of activity in New Zealand that contains indicators which can be linked to Russian state actors.’’

Hampton said the Government was in the process of taking a fresh look at the current Cyber Security Strategy to ensure the country was equipped to handle increasing cyber security threats.

National leader Simon Bridges said Russia’s cyber activity, while not directly related to New Zealand, was of concern and was ‘‘despicable’’.

He called on the Government to strongly condemn the actions because ‘‘they’ve been soft on these issues in the past’’.