NZ Herald
  • Home
  • Latest news
  • Herald NOW
  • Video
  • New Zealand
  • Sport
  • World
  • Business
  • Entertainment
  • Podcasts
  • Quizzes
  • Opinion
  • Lifestyle
  • Travel
  • Viva
  • Weather

Subscriptions

  • Herald Premium
  • Viva Premium
  • The Listener
  • BusinessDesk

Sections

  • Latest news
  • New Zealand
    • All New Zealand
    • Crime
    • Politics
    • Education
    • Open Justice
    • Scam Update
  • Herald NOW
  • On The Up
  • World
    • All World
    • Australia
    • Asia
    • UK
    • United States
    • Middle East
    • Europe
    • Pacific
  • Business
    • All Business
    • MarketsSharesCurrencyCommoditiesStock TakesCrypto
    • Markets with Madison
    • Media Insider
    • Business analysis
    • Personal financeKiwiSaverInterest ratesTaxInvestment
    • EconomyInflationGDPOfficial cash rateEmployment
    • Small business
    • Business reportsMood of the BoardroomProject AucklandSustainable business and financeCapital markets reportAgribusiness reportInfrastructure reportDynamic business
    • Deloitte Top 200 Awards
    • CompaniesAged CareAgribusinessAirlinesBanking and financeConstructionEnergyFreight and logisticsHealthcareManufacturingMedia and MarketingRetailTelecommunicationsTourism
  • Opinion
    • All Opinion
    • Analysis
    • Editorials
    • Business analysis
    • Premium opinion
    • Letters to the editor
  • Politics
  • Sport
    • All Sport
    • OlympicsParalympics
    • RugbySuper RugbyNPCAll BlacksBlack FernsRugby sevensSchool rugby
    • CricketBlack CapsWhite Ferns
    • Racing
    • NetballSilver Ferns
    • LeagueWarriorsNRL
    • FootballWellington PhoenixAuckland FCAll WhitesFootball FernsEnglish Premier League
    • GolfNZ Open
    • MotorsportFormula 1
    • Boxing
    • UFC
    • BasketballNBABreakersTall BlacksTall Ferns
    • Tennis
    • Cycling
    • Athletics
    • SailingAmerica's CupSailGP
    • Rowing
  • Lifestyle
    • All Lifestyle
    • Viva - Food, fashion & beauty
    • Society Insider
    • Royals
    • Sex & relationships
    • Food & drinkRecipesRecipe collectionsRestaurant reviewsRestaurant bookings
    • Health & wellbeing
    • Fashion & beauty
    • Pets & animals
    • The Selection - Shop the trendsShop fashionShop beautyShop entertainmentShop giftsShop home & living
    • Milford's Investing Place
  • Entertainment
    • All Entertainment
    • TV
    • MoviesMovie reviews
    • MusicMusic reviews
    • BooksBook reviews
    • Culture
    • ReviewsBook reviewsMovie reviewsMusic reviewsRestaurant reviews
  • Travel
    • All Travel
    • News
    • New ZealandNorthlandAucklandWellingtonCanterburyOtago / QueenstownNelson-TasmanBest NZ beaches
    • International travelAustraliaPacific IslandsEuropeUKUSAAfricaAsia
    • Rail holidays
    • Cruise holidays
    • Ski holidays
    • Luxury travel
    • Adventure travel
  • Kāhu Māori news
  • Environment
    • All Environment
    • Our Green Future
  • Talanoa Pacific news
  • Property
    • All Property
    • Property Insider
    • Interest rates tracker
    • Residential property listings
    • Commercial property listings
  • Health
  • Technology
    • All Technology
    • AI
    • Social media
  • Rural
    • All Rural
    • Dairy farming
    • Sheep & beef farming
    • Horticulture
    • Animal health
    • Rural business
    • Rural life
    • Rural technology
    • Opinion
    • Audio & podcasts
  • Weather forecasts
    • All Weather forecasts
    • Kaitaia
    • Whangārei
    • Dargaville
    • Auckland
    • Thames
    • Tauranga
    • Hamilton
    • Whakatāne
    • Rotorua
    • Tokoroa
    • Te Kuiti
    • Taumaranui
    • Taupō
    • Gisborne
    • New Plymouth
    • Napier
    • Hastings
    • Dannevirke
    • Whanganui
    • Palmerston North
    • Levin
    • Paraparaumu
    • Masterton
    • Wellington
    • Motueka
    • Nelson
    • Blenheim
    • Westport
    • Reefton
    • Kaikōura
    • Greymouth
    • Hokitika
    • Christchurch
    • Ashburton
    • Timaru
    • Wānaka
    • Oamaru
    • Queenstown
    • Dunedin
    • Gore
    • Invercargill
  • Meet the journalists
  • Promotions & competitions
  • OneRoof property listings
  • Driven car news

Puzzles & Quizzes

  • Puzzles
    • All Puzzles
    • Sudoku
    • Code Cracker
    • Crosswords
    • Cryptic crossword
    • Wordsearch
  • Quizzes
    • All Quizzes
    • Morning quiz
    • Afternoon quiz
    • Sports quiz

Regions

  • Northland
    • All Northland
    • Far North
    • Kaitaia
    • Kerikeri
    • Kaikohe
    • Bay of Islands
    • Whangarei
    • Dargaville
    • Kaipara
    • Mangawhai
  • Auckland
  • Waikato
    • All Waikato
    • Hamilton
    • Coromandel & Hauraki
    • Matamata & Piako
    • Cambridge
    • Te Awamutu
    • Tokoroa & South Waikato
    • Taupō & Tūrangi
  • Bay of Plenty
    • All Bay of Plenty
    • Katikati
    • Tauranga
    • Mount Maunganui
    • Pāpāmoa
    • Te Puke
    • Whakatāne
  • Rotorua
  • Hawke's Bay
    • All Hawke's Bay
    • Napier
    • Hastings
    • Havelock North
    • Central Hawke's Bay
    • Wairoa
  • Taranaki
    • All Taranaki
    • Stratford
    • New Plymouth
    • Hāwera
  • Manawatū - Whanganui
    • All Manawatū - Whanganui
    • Whanganui
    • Palmerston North
    • Manawatū
    • Tararua
    • Horowhenua
  • Wellington
    • All Wellington
    • Kapiti
    • Wairarapa
    • Upper Hutt
    • Lower Hutt
  • Nelson & Tasman
    • All Nelson & Tasman
    • Motueka
    • Nelson
    • Tasman
  • Marlborough
  • West Coast
  • Canterbury
    • All Canterbury
    • Kaikōura
    • Christchurch
    • Ashburton
    • Timaru
  • Otago
    • All Otago
    • Oamaru
    • Dunedin
    • Balclutha
    • Alexandra
    • Queenstown
    • Wanaka
  • Southland
    • All Southland
    • Invercargill
    • Gore
    • Stewart Island
  • Gisborne

Media

  • Video
    • All Video
    • NZ news video
    • Herald NOW
    • Business news video
    • Politics news video
    • Sport video
    • World news video
    • Lifestyle video
    • Entertainment video
    • Travel video
    • Markets with Madison
    • Kea Kids news
  • Podcasts
    • All Podcasts
    • The Front Page
    • On the Tiles
    • Ask me Anything
    • The Little Things
  • Cartoons
  • Photo galleries
  • Today's Paper - E-editions
  • Photo sales
  • Classifieds

NZME Network

  • Advertise with NZME
  • OneRoof
  • Driven Car Guide
  • BusinessDesk
  • Newstalk ZB
  • Sunlive
  • ZM
  • The Hits
  • Coast
  • Radio Hauraki
  • The Alternative Commentary Collective
  • Gold
  • Flava
  • iHeart Radio
  • Hokonui
  • Radio Wanaka
  • iHeartCountry New Zealand
  • Restaurant Hub
  • NZME Events

SubscribeSign In
Advertisement
Advertise with NZME.
Home / World

Special report: How gangs of cyber pirates are attacking like never before

By Roland Oliphant
Daily Telegraph UK·
7 Jun, 2021 05:41 PM7 mins to read

Subscribe to listen

Access to Herald Premium articles require a Premium subscription. Subscribe now to listen.
Already a subscriber?  Sign in here

Listening to articles is free for open-access content—explore other articles or learn more about text-to-speech.
‌
Save

    Share this article

Waikato DHB's IT centre was the target of a major cyber security attack. Video / Waikato DHB

The White House calls it a "rising national security threat". The US Justice department has been instructed to treat it as seriously as terrorism. And President Joe Biden is to raise it with Vladimir Putin at a high-stakes summit in Geneva next week.

Ransomware - cyber criminals forcing companies to pay millions for the return of stolen data - has reached heights of greed, audacity and reach unmatched in criminality since the heyday of Somali piracy.

Now, the gangs are posing such a threat to the infrastructure of modern civilisation, including the supply of food, energy and healthcare, that the director of the FBI has compared it to the 9/11 terror attacks.

"There are a lot of parallels, there's a lot of importance, and a lot of focus by us on disruption and prevention," Christopher Wray said in an interview with the Wall Street Journal this week.

Advertisement
Advertise with NZME.
Advertisement
Advertise with NZME.

Cyber security experts say attacks have mounted rapidly since 2019. Britain's National Cyber Security Centre says its incident management operation handled more than three times as many ransomware incidents in 2020 as the year before.

Waikato District Health Board CEO Dr Kevin Snee has been dealing with 'the biggest cyber attack in New Zealand's history'. Photo / Warren Buckland, File
Waikato District Health Board CEO Dr Kevin Snee has been dealing with 'the biggest cyber attack in New Zealand's history'. Photo / Warren Buckland, File

And the events of the past few weeks have prompted alarm at the top of Western governments.

Since April, ransomware hackers have targeted Quanta Computer, a Taiwanese firm that supplies Apple; ExaGrid, a US firm that provides backup data storage (ironically, partly as insurance against a ransomware attacks); the Colonial fuel pipeline in the United States; Ireland's healthcare system, which saw its systems frozen for a full week; New Zealand's Waikato District Health Board; and France's Axa insurance group, which had days earlier said it would no longer offer coverage against such attacks because of a French government warning against paying ransoms.

Cybercriminals hit Asian subsidiaries of Paris-based insurance company AXA with a ransomware attack, impacting Thailand, Malaysia, Hong Kong and the Philippines. Photo / Thibault Camus,AP
Cybercriminals hit Asian subsidiaries of Paris-based insurance company AXA with a ransomware attack, impacting Thailand, Malaysia, Hong Kong and the Philippines. Photo / Thibault Camus,AP

The most recent attack, on May 30, forced the multinational meat supplier JBS to shut down cattle slaughter in Australia and the United States.

Advertisement
Advertise with NZME.

Malicious programs that encrypt computers and force the owner to pay a fee to get their data back have been around for years. And from the programming point of view, little has changed.

"Ransomware is just malware - viruses and Trojans like we've known before. Nothing remarkable from a technology point of view," said Charl van der Walt, global head for security research at Orange Cyber Defence. "The innovation is in the crime part, not the cyber part."

Van der Walt identifies three shifts that have contributed to today's crisis. The first was the emergence of Bitcoin and other cryptocurrencies in 2012, which suddenly provided a secure way of monetising large sums without using international bank transfer and credit card systems that could easily be traced or shut down.

The world's largest meat company, Brazil-based meat processor JBS SA received a ransom demand from a criminal organisation, likely based in Russia. Photo / David Zalubowski, AP, File
The world's largest meat company, Brazil-based meat processor JBS SA received a ransom demand from a criminal organisation, likely based in Russia. Photo / David Zalubowski, AP, File

That fuelled the rise of what hackers call "big game hunting" - targeting major firms, freezing their entire data systems, and demanding hundreds of thousands or even millions of dollars in ransom.

Discover more

Business

Sir Ian v Sir Russell: Knights in new battle over TV sailing graphics

03 Jun 05:00 PM
Technology

'There's footage': Pentagon's UFO report revealed

04 Jun 06:39 PM
World

Microsoft blames blocking of Tiananmen Square image on 'human error'

05 Jun 09:10 PM
Business

Apple paid millions to woman after explicit photos posted online

06 Jun 07:49 PM

The second shift came around 2019, when a criminal group called Maze added a second threat: if payment was not prompt, they warned one victim, they would no only withhold the decryption key but leak hundreds of gigabytes of sensitive commercial data on to the internet.

This double extortion was designed to defeat companies who had conscientiously kept off-line backups of their data, and it was a feature of all the recent high-profile attacks.

The hackers who targeted Ireland's health system last month eventually handed over the decryption tool for free - but warned patient data would still be leaked if a cash settlement was forthcoming.

The third shift was the evolution of opportunistic criminality into a sophisticated industry employing multiple highly skilled specialists.

The massive Waikato District Health Board IT ransomware attack exposed the poor IT security in New Zealand's public health system. Illustration / Rod Emmerson
The massive Waikato District Health Board IT ransomware attack exposed the poor IT security in New Zealand's public health system. Illustration / Rod Emmerson

Again, the parallel with Somali piracy is striking, says van der Walt.

A typical operation today will see an "operator" build code and infrastructure for an attack, then hire affiliates to carry it out in exchange for a share in the profits.

Advertisement
Advertise with NZME.

The affiliates in turn might turn to "initial access brokers" - hackers who specialise in gaining access to the systems of potential targets and auctioning that access to the highest bidder. Others specialise in laundering the proceeds.

Paul Chichester, the NCSC director of operations, urges companies and individuals to make themselves hard targets.

"It is vital that preventative measures are put in place, including additional security around sensitive data and up-to-date offline back-ups," he said.

Others have urged a war on cryptocurrency that would emulate the crackdown on payments via the international banking system which destroyed the Russia-based Viagra-spamming empires in the late 2000s.

Drivers fill their tanks at the Speedway in East Ridge, Tennessee, after the ransomware attack on the Colonial Pipeline. Photo / Matt Hamilton, Chattanooga Times Free Press via AP
Drivers fill their tanks at the Speedway in East Ridge, Tennessee, after the ransomware attack on the Colonial Pipeline. Photo / Matt Hamilton, Chattanooga Times Free Press via AP

Paul Weaver, a security researcher at International Computer Science Institute in Berkeley, argued in a blog last month that such payment interdiction also proved effective against an earlier ransomware epidemic in 2012 and 2013.

Russian hacking incidents

July 2015
Email accounts belonging to Islam TV, a UK-based station, are accessed. The UK's National Cyber Security Centre (NCSC) says it has "high confidence that the GRU was almost certainly responsible".

Advertisement
Advertise with NZME.

June-July 2016
The United States' Democratic National Committee (DNC) is hacked, and its documents were published online. The UK's NSCS says it believes Russian intelligence services are responsible.

November 2016
Election systems in all 50 US states are targeted by Russia, in a hack that was undetected by the states and federal officials at the time.

June 2017
On the day of the 2017 General Election, Russian hackers use fake Microsoft Word documents to break into the computers of people working in the UK energy industry.

August 2017
A number of medical files of international athletes are released after the World Anti-Doping Agency (Wada) is hacked. The NCSC says that Russia's GRU was almost certainly responsible.

October 2017
Home and small business routers worldwide are infected with malware. The UK Government says the infection could have allowed attackers to control infected devices.

March 2018
The US government releases a report that accuses Russia of a hacking campaign to infiltrate the United States' "critical infrastructure": power plants, nuclear generators, and water facilities.

Advertisement
Advertise with NZME.

March 2018
Russia's GRU carries out an attempted "spearfishing" attack on the Foreign Office, the UK Government says, but is repelled.

April 2018
The Ministry of Defence's Porton Down laboratory targeted in the wake of the Skripal poisoning in Salisbury. The facility is used to analyse samples from the incident.

October 2018
The GRU is again accused of carrying out a swathe of attacks in the UK and abroad on political institutions, financial systems, transport networks and the media.

November 2019
Jeremy Corbyn brandishes hacked documents from the UK Government as part of Labour's election campaign. A statement released by Dominic Raab, the Foreign Secretary, yesterday accused "Russian actors" of amplifying the documents.

The British government officially takes a strong line against paying cyber ransoms. There is evidence that could eventually defeat the market, but others are sceptical.

Experience of dealing with real life kidnappers suggests payments will occur under the table even if officially banned when victims have no other choice.

Advertisement
Advertise with NZME.

In the end, it is a diplomatic problem.

Almost all the prominent groups involved in the recent surge of attacks are run by native Russian speakers and based in the former Soviet Union. The other major source of ransomware activity is North Korea, but Russian speakers have dominated the recent wave of large scale attacks.

Biden has been careful to say there was no evidence the Russia government was behind the recent spate of attacks.

But many Western cyber security experts and officials assume the gangs enjoy some level of protection - or at least indifference - from the Russian state. And Biden is expected to raise the issue directly with Vladimir Putin at their summit in Geneva on June 16.

Save

    Share this article

Latest from World

World

Mushroom poisoning trial: Court releases photos showing deadly beef wellington

07 Jul 08:51 AM
World

The moment Erin Patterson knew her fate was sealed

07 Jul 08:17 AM
Premium
Business|companies

Tech Insider: UK tells retailers to use NZ’s Auror crime-fighting software

07 Jul 07:00 AM

From early mornings to easy living

sponsored
Advertisement
Advertise with NZME.

Latest from World

Mushroom poisoning trial: Court releases photos showing deadly beef wellington

Mushroom poisoning trial: Court releases photos showing deadly beef wellington

07 Jul 08:51 AM

The leftovers were taken from Erin Patterson's bin.

The moment Erin Patterson knew her fate was sealed

The moment Erin Patterson knew her fate was sealed

07 Jul 08:17 AM
Premium
Tech Insider: UK tells retailers to use NZ’s Auror crime-fighting software

Tech Insider: UK tells retailers to use NZ’s Auror crime-fighting software

07 Jul 07:00 AM
Jury finds Erin Patterson guilty of murder

Jury finds Erin Patterson guilty of murder

Solar bat monitors uncover secrets of Auckland’s night sky
sponsored

Solar bat monitors uncover secrets of Auckland’s night sky

NZ Herald
  • About NZ Herald
  • Meet the journalists
  • Newsletters
  • Classifieds
  • Help & support
  • Contact us
  • House rules
  • Privacy Policy
  • Terms of use
  • Competition terms & conditions
  • Our use of AI
Subscriber Services
  • NZ Herald e-editions
  • Daily puzzles & quizzes
  • Manage your digital subscription
  • Manage your print subscription
  • Subscribe to the NZ Herald newspaper
  • Subscribe to Herald Premium
  • Gift a subscription
  • Subscriber FAQs
  • Subscription terms & conditions
  • Promotions and subscriber benefits
NZME Network
  • The New Zealand Herald
  • The Northland Age
  • The Northern Advocate
  • Waikato Herald
  • Bay of Plenty Times
  • Rotorua Daily Post
  • Hawke's Bay Today
  • Whanganui Chronicle
  • Viva
  • NZ Listener
  • Newstalk ZB
  • BusinessDesk
  • OneRoof
  • Driven Car Guide
  • iHeart Radio
  • Restaurant Hub
NZME
  • About NZME
  • NZME careers
  • Advertise with NZME
  • Digital self-service advertising
  • Book your classified ad
  • Photo sales
  • NZME Events
  • © Copyright 2025 NZME Publishing Limited
TOP