The level and complexity of cyber threats to New Zealand organisations is increasing, says the Government Communications and Security Bureau (GCSB) director.
Government Communications Security Bureau director Andrew Hampton Photo: RNZ / Jane Patterson
The Intelligence and Security Committee held the annual review of the GCSB and the Security Intelligence Service (SIS) in Parliament today.
GCSB director Andrew Hampton said the primary focus of its cyber security role were advanced and persistent cyber threats - usually based overseas - to nationally significant organisations.
"These threats are becoming more complex and their sources more diverse."
Mr Hampton said there was a growing range of international threats targeting New Zealand organisations for financial gain, or as a means of advancing their positions.
He said New Zealand organisations were targeted because they had a wealth of information that was attractive, including intellectual property for new technology innovations, customer data, business and pricing strategies and government positions on sensitive topics.
"The types of incidents we're seeing include phishing attacks. These are socially-engineered emails intended to make the recipient open an attachment or visit a website which contains malware and ransomware, which involves an actor locking down a system until money is paid."
Mr Hampton said the level of threat was increasing. In the past year the national cyber security centre recorded 338 incidents, an average of 28 a month, compared with 190 incidents the previous year.
He pointed out that this year's high figure reflected, in part, increased detection capabilities available through Cortex, the programme introduced to help fight cyber attacks.
Spying Stats for the 2015/16 year
GCSB:
* A total of 22 interception warrants were in force during the 2015/16 year, 15 of which were issued during the year
* There were 46 access authorisations in force during the year, 30 were issued in the year
* The GCSB provided assistance to the SIS seven times and twice to the Defence Force
* It also provided foreign intelligence to 19 government organisations
* It provided 24/7 watch and warn services in support of major events, travelling VIPS and NZDF operations
SIS:
* A total of 55 domestic intelligence warrants were in force, 37 of which were issued during the year
* There were 25 foreign intelligence warrants in force, 18 of which were issued in the year
* Three domestic visual surveillance warrants were in force, only one was issued in the year
* During the period the SIS issued one director's authorisation to spy and within 24 hours a warrant was requested and issued.