Security Experts:

Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Cybercrime

F-35 Stealth Fighter Data Stolen in Australia Defence Hack

Sensitive data about Australia’s F-35 stealth fighter and P-8 surveillance aircraft programmes were stolen when a defence subcontractor was hacked using a tool widely used by Chinese cyber criminals, officials said Thursday.

Sensitive data about Australia’s F-35 stealth fighter and P-8 surveillance aircraft programmes were stolen when a defence subcontractor was hacked using a tool widely used by Chinese cyber criminals, officials said Thursday.

The 50-person aerospace engineering firm was compromised in July last year but the national cyber security agency, the Australian Signals Directorate (ASD), only became aware of the breach in November, technology website ZDNet Australia reported.

Some 30GB of “sensitive data” subjected to restricted access under the US government’s International Traffic in Arms Regulations rules were stolen, ASD’s Mitchell Clarke told a security conference Wednesday according to ZDNet.

Clarke, who worked on the case and did not name the subcontractor, said information about the F-35, the US’ latest generation of fighter jets, as well as the P8, an advanced submarine hunter and surveillance craft, were lifted.

Another document was a wireframe diagram of one of the Australian navy’s new ships, where a viewer could “zoom in down to the captain’s chair”.

The hackers used a tool called “China Chopper” which according to security experts is widely used by Chinese actors, and had gained access via an internet-facing server, he said.

In other parts of the network, the subcontractor also used internet-facing services that still had their default passwords “admin” and “guest”.

Those brought in to assess the attack nicknamed the hacker Alf after a character on the popular Australian soap “Home and Away”, Clarke said. The three month period where they were unaware of the breach they dubbed “Alf’s Mystery Happy Fun Time”.

Defence Industry Minister Christopher Pyne told reporters in Adelaide “the information they have breached is commercial”.

“It is not classified and it is not dangerous in terms of the military,” he said.

Pyne added that Australia was increasingly a target for cyber criminals as it was undertaking a massive Aus$50 billion (US$39 billion) submarine project which he described as the world’s largest.

The nation has also committed to buy 72 F-35A aircraft for Aus$17 billion.

He would not comment who might be behind the breach, only stating that the government was spending billions of dollars on cyber security.

Western governments have long accused hackers in China of plundering industrial, corporate and military secrets.

The revelations came just days after Assistant Minister for Cyber Security Dan Tehan said there were 47,000 cyber incidents in the last 12 months, a 15 percent jump from the previous year.

A key worry was 734 attacks that hit private sector national interest and critical infrastructure providers during the period, Tehan said.

Last year, the government’s Cyber Security Centre revealed that foreign spies installed malicious software on the Bureau of Meteorology’s system and stole an unknown number of documents.

Written By

AFP 2023

Click to comment

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Expert Insights

Related Content

Cybercrime

Zendesk is informing customers about a data breach that started with an SMS phishing campaign targeting the company’s employees.

Cybercrime

The release of OpenAI’s ChatGPT in late 2022 has demonstrated the potential of AI for both good and bad.

Cyberwarfare

Websites of German airports, administration bodies and banks were hit by DDoS attacks attributed to Russian hacker group Killnet

Cybercrime

The FBI dismantled the network of the prolific Hive ransomware gang and seized infrastructure in Los Angeles that was used for the operation.

Cybercrime

A new study by McAfee and the Center for Strategic and International Studies (CSIS) named a staggering figure as the true annual cost of...

Cybercrime

A recently disclosed vBulletin vulnerability, which had a zero-day status for roughly two days last week, was exploited in a hacker attack targeting the...

Cyberwarfare

Iranian APT Moses Staff is leaking data stolen from Saudi Arabia government ministries under the recently created Abraham's Ax persona

Cybercrime

The degree of danger that may be introduced when adversaries start to use AI as an effective weapon of attack rather than a tool...