An Australian Watering Hole (but in Canberra, not the Outback)


The Australian Federal Parliament suffered a malware infection earlier this year after some users fell victim to a watering hole attack, the Australian Broadcasting Corporation (ABC) reports. The attack is thought to be state-sponsored and led to two senators having “non-sensitive” data stolen.

“A small number of users visited a legitimate external website that had been compromised,” said Senate President Scott Ryan. “This caused malware to be injected into the parliamentary computer network.”

ABC has also learned that Parliament’s system was attacked by the Emotet banking Trojan last month, but the Government’s security team thwarted the attack.

Labor MP Tim Watts said Parliament offers regular cyber hygiene courses for thousands of people who use the system, but he noted that few people attend these courses.

“It’s a common practice in the corporate sector these courses are mandatory; that's not the approach the parliament has taken,” he said. “We need to significantly increase the sense of urgency among MP's and staff about cyber hygiene and how to protect themselves.”

A majority of all cyberattacks are the result of human error, and most occur because an employee is tricked into letting an attacker in. New-school security awareness training can teach your employees how to avoid falling for social engineering tactics. 

The Australian Broadcasting Corporation has the story:

Free Phishing Security Test

Would your users fall for convincing phishing attacks? Take the first step now and find out before bad actors do. Plus, see how you stack up against your peers with phishing Industry Benchmarks. The Phish-prone percentage is usually higher than you expect and is great ammo to get budget.

PST ResultsHere's how it works:

  • Immediately start your test for up to 100 users (no need to talk to anyone)
  • Select from 20+ languages and customize the phishing test template based on your environment
  • Choose the landing page your users see after they click
  • Show users which red flags they missed, or a 404 page
  • Get a PDF emailed to you in 24 hours with your Phish-prone % and charts to share with management
  • See how your organization compares to others in your industry

Go Phishing Now!

PS: Don't like to click on redirected buttons? Cut & Paste this link in your browser:

Subscribe To Our Blog

Anti-Phishing Guide ebook

Get the latest about social engineering

Subscribe to CyberheistNews