Nation-state campaign targeting Australian critical infrastructure
ACSC advisory: ongoing intrusion activity against Australian critical infrastructure using valid accounts and lateral movement.
HIGH
Severity & confidence
Source severityhigh
Platform severityhigh
Confidencehigh
Exploitationunknown
CVSS-
Affected
CountriesAU
Sectorscritical infrastructureenergygovernment
Reporting sources (1)
Australian Cyber Security Centre (ACSC)
Timeline & provenance
Published2026-08-13T20:07:49
Last updated2026-08-13T20:07:49
Ingested2026-08-18T20:07:49
FreshnessPERIODIC
Threat typecampaign
MITRE ATT&CK
T1078T1021
Threat actors
APT (unspecified)
Recommended action
Review privileged accounts, enable MFA, and monitor lateral movement.
Next steps
- Identify affected systems in your environment.
- Apply the vendor patch or mitigation guidance.
- Review logs for indicators described in the advisory.
- Follow the affected vendor/product to track updates.
Confidence explanation
Reported by a government or cert-grade source (CISA, NCSC, NVD, ENISA, MSRC).
Source type: gov ยท Original: Australian Cyber Security Centre (ACSC)
