A joint alert from the US and Britain said targets numbered in the millions and included "primarily government and private-sector organisations, critical infrastructure providers, and the internet service providers (ISPs) supporting these sectors".
"We have high confidence that Russia has carried out a co-ordinated campaign to compromise ... routers, residential and business - the things you and I have in our home," said White House cybersecurity co-ordinator Rob Joyce.
In February GCSB (Government Communications Security Bureau) director-general Andrew Hampton said international partners attributed the NotPetya cyber-attack to the Russian government.
NotPetya caused widespread damage and disruption to computer systems around the world in June 2017.
"While there were no reports of NotPetya having a direct impact in New Zealand, it caused disruption to some organisations while they updated systems to protect themselves from it," he said.
In the 12 months to June 2017, 122 of the 396 serious incidents recorded by the GCSB's National Cyber Security Centre involved indicators previously been linked to state-sponsored actors, he said.
- With the Washington Post