Australia to Lead Global Fight Against Ransomware

An IT researchers shows on a giant screen a computer infected by a ransomware at the LHS (High Security Laboratory) of the INRIA (National Institute for Research in Computer Science and Automation) in Rennes, France, on Nov. 3, 2016. (Damien Meyer/AFP via Getty Images)

The Biden Administration has announced Australia will head the international fight against ransomware cyberattacks as part of the U.S.-led Counter Ransomware Initiative.

The announcement, on Nov. 2, by the White House comes after the administration gathered 36 countries and the European Union (27 countries), for the Second International Counter Ransomware Initiative (CRI) Summit October 31-November 1, 2022

According to the White House, Australia will chair the International Counter Ransomware Task Force (ICRTF) to coordinate resilience, disruption, and counter illicit finance activities.

The ICRTF will also be used to develop cross-sectoral tools and cyber threat intelligence exchange to increase early warning capabilities and prevent attacks, as well as consolidate policy and best practice frameworks.

Additionally, it will generate resources for the public on “tools, tactics, and procedures” to improve awareness and cyber hygiene around ransomware globally, and will work with key private sector partners, including the establishment of an ancillary industry chapter that would be actively engaged with the work of the ICRTF.

Minister for Cyber Security and Home Affairs Clare O'Neil said in a thread on Twitter that the task force would enable international partners worldwide to disrupt, combat and defend against ransomware.

“Ransomware attacks are on the rise around the world,” she said. “This task force will enable collaboration with our international partners worldwide to disrupt, combat, and defend us against ransomware.”

According to a media release from the Department of Home Affairs, the task force will be made up of over 60 countries, including Ukraine, Canada, France, Germany, India,  Israel, Japan, Kenya, the Netherlands, New Zealand, Nigeria, United Kingdom, United States, and the EU.

Australia a Major Target for Ransomware Attacks

The announcement comes as Australia continues to be targeted by ransomware hackers, with numerous cyber incidents targeting major public companies like Medibank, Australia’s larger health insurer; Optus, the second largest telecommunications company; and EnergyAustralia, one of the three largest energy companies. Additionally, Australian real estate giant Harcourts and online companies Vinomofo, Woolworths’ MyDeal, and Medlab.

The government has responded to the increasing cyberattacks by introducing an amendment to the Privacy Bill on Oct. 26.

The amendment will significantly increase penalties to organisations for serious or repeated privacy breaches, a move the Labor government hopes can compel businesses to do more on cybersecurity.

It will also strengthen the Notifiable Data Breaches scheme to ensure the Information Commissioner has knowledge of an incident and the data compromised.

“These amendments are targeted and measured,” Attorney General Richard Dreyfuss said. “They respond to the most pressing issues arising from the Optus data breach and other recent cyber incidents.”

Albanese Government Under Scrutiny for Cyber Security Approach

The Australian government has faced scrutiny over its response to the ongoing attacks, with Shadow Minister for Cyber Security James Paterson questioning the time it’s taken the minister for cyber security to respond to the attacks.

“In a cyber attack, time is of the essence. Early engagement by the government allows the facts to be established, data theft to potentially be disrupted, and gives customers time to take any necessary steps to mitigate the consequences of the breach.”