Spy agency says online threats to NZ likely to intensify

The GCSB says New Zealand faces increasingly complex cybersecurity threats from criminals and from other countries.

The intelligence agency’s Cyber Threat Report found malicious cyber activity was likely to impact more systems and victims as the use of technology use increased.

“As more cyber threat actors enter this environment, it is becoming increasingly difficult to disassociate or attribute state and criminal cyber activity,” said the National Cyber Security Centre, which is part of the GCSB.

“New Zealand is increasingly experiencing incidents in which sophisticated cyber criminals are using their capabilities and wider resources to scale their operations,” the cyber security agency added.

“Ransomware has remained a persistent threat to New Zealand’s nationally significant organisations, smaller businesses and even schools.”

Some of these criminals had their operations disrupted through efforts including arrests and dismantling relevant infrastructure.

“However, it is expected that this will only be temporary as groups diversify and rebuild,” the report added.

New technology was likely to enable new scams, the report added, but that did not mean existing threats such as phishing would evaporate.

The report said 7122 cyber security incidents were recorded in the year to June 30, its first year as New Zealand’s lead operational cyber security agency.

And some of these were likely also state-sponsored activities.

“I encourage everyone to familiarise themselves with the cyber landscape, develop a better understanding of the techniques and tactics used by malicious cyber actors, and take the steps recommended in this report to mitigate them,” said Lisa Fong, GCSB Deputy Director-General for Cyber Security.

On Friday, it emerged that funeral directors were warning of an alarming increase in livestream scams on social media platforms.

The scams circulated for funerals of high-profile people, such as the late Green Party MP Efeso Collins in March 2024, and Dame Tariana Turia’s tangi in January.

How to get help

Internal Affairs anti-spam and scam awareness: Forward text scams for free to 7726

Cert NZ: Individuals, and small businesses can report a cyber attack, and get advice: www.cert.govt.nz

Financial Markets Authority: https://www.fma.govt.nz/scams/

Privacy Commissioner: Complaints about privacy breaches. 0800 803 909 or privacy.org.nz/your-rights/making-a-complaint/

ID fraud: Internal Affairs advice: dia.govt.nz/Identity - Are-you-a-victim-of-identity-theft

IDCare: Assistance freezing your credit record, regaining control of your online identity after an ID theft: idcare.org

NZ Police: Report cybercrime online scams, online child safety issues: police.govt.nz/advice-services/cybercrime-and-internet

If you believe you are or have been the victim of fraud, contact police at 105.police.govt.nz, or call police on 105.