INDUSTRIES

&

MARKETSCybercrimeinAustraliaCHAPTER

01GlobaloverviewSizeofthecybersecuritymarketworldwidefrom2020to2030(inbillionU.S.dollars)Cybersecuritymarketrevenuesworldwide2020-2030600500400300538.3407.9296.1217.92001000202020222027*2030*3Description:Theglobalcybersecuritymarketsizeisforecasttogrowto538.3billionU.S.dollarsby2030.Cybersecurityisthepracticeofprotectingcomputerinformationsystems,hardware,network,anddatafromcyberattacks.Anincreasingawarenessofcyberthreatsleadtoarisinginvestmentincybersecurityinfrastructureworldwide.ReadmoreNote(s):Worldwide;2021to2027;*Forecast2022-2030CAGR:7.8%ReadmoreSource(s):GlobeNewswire;ResearchandMarkets;VarioussourcesDistributionofcyberattacksacrossworldwideindustriesin2023Shareofcyberattacksinglobalindustriesworldwide2023Shareofcyberattacks0%5%10%15%20%25%30%ManufacturingFinanceandinsuranceProfessional,business,andconsumerservicesEnergy25.7%18.2%15.4%11.1%10.7%RetailandwholesaleHealthcare6.3%Government4.3%4.3%TransportationEducation2.8%Mediaandtelecom1.2%4Description:In2023,manufacturingsawthehighestshareofcyberattacksamongtheleadingindustriesworldwide.Duringtheexaminedyear,manufacturingcompaniesencounterednearlyaquarterofthetotalcyberattacks.Financeandinsuranceorganizationsfollowed,witharound18percent.Professional,business,andconsumerservicesrankedthird,with15.4percentofreportedcyberattacks.

ReadmoreNote(s):Worldwide;2023Source(s):IBMFrequencyofsuccessfulcyberattackslaunchedagainstorganizationsworldwide2022Frequencyofsuccessfulcyberattacksagainstbusinessesworldwide202250%45.5%45%40%35%30%25%20%15%10%5%27.4%15.3%11.8%0%Between1and5timesBetween6and10timesMorethan10timesNotonce5Description:ANovember2022surveyofglobalITsecurityprofessionalsfoundthatover45percentofrespondentsclaimedaboutonetofivesuccessfulcyberattacksagainsttheirorganization`sglobalnetworkwithinthepast12months.Bycomparison,nearly12percentexperiencedmorethantensuccessfulcyberattacks.ReadmoreNote(s):Worldwide;November2022;1,200respondents;ITsecurityprofessionalsSource(s):CyberEdgeAnnualshareoforganizationsaffectedbyransomwareattacksworldwidefrom2018to2023Businessesworldwideaffectedbyransomware2018-202380%70%72.7%71%68.5%62.4%60%50%40%30%20%10%0%56.1%55.1%2018201920202021202220236Description:Asof2023,over72percentofbusinessesworldwidewereaffectedbyransomwareattacks.Thisfigurerepresentsanincreaseonthepreviousfiveyearsandwasbyfarthehighestfigurereported.Overall,since2018,morethanhalfofthetotalsurveyrespondentseachyearstatedthattheirorganizationshadbeenvictimizedbyransomware.ReadmoreNote(s):Worldwide;2018to2023;1,200respondents;ITsecurityprofessionalsandpractitioners;allfromorganizationswithmorethan500employeesSource(s):CyberEdgeLeadingcountriesoforiginforunsolicitedspame-mailsin2023,byshareofworldwidespamvolumeSpame-mail:leadingcountriesoforiginofspam2023Percentageofspame-mailsworldwide15%

20%0%5%10%25%30%35%RussiaUnitedStatesChina(Mainland)Japan31.5%11.3%11%3.6%3.3%2.8%2.5%2.5%2%1.6%GeranyBrazilNetherlandsKazakhstanIndiaSouthKorea7Description:In2023,Russiarankedfirstbyitsshareofunsolicitedspame-mails.Overall,31.5percentofglobalspame-mailsoriginatedfromIPsinRussia.TheUnitedStatesrankedsecond,with11.3percent.MainlandChinafollowed,accountingforover11percentofglobalunsolicitedspame-mailsduringthemeasuredperiod.ReadmoreNote(s):Worldwide;2023Source(s):KasperskyLabCybercrimetypeswiththehighestamountofvictimlossesintheUnitedStatesin2023,bytype(inmillionU.S.dollars)LeadingcybercrimevictimlossesU.S.2023,bytypeofcrimeAmountoflossinmillionU.S.dollars05001,0001,5002,0002,5003,0003,5004,0004,5005,000InvestmentBusinesse-mailcompromise(BEC)Techsupport4,570.272,946.83924.51744.21652.54534.39394.06309.64173.62PersonaldatabreachConfidencefraud/RomanceDataBreachGovernmentimpersonationNon-payment/Non-deliveryCreditcard/CheckfraudRealestate145.24134.51126.2AdvancedfeeIdentitytheftLottery/sweepstakes/inheritance94.58Description:In2023,investmentfraudwasthecybercrimecausingthemostseverefinancialdamagefortheindividualsintheUnitedStates.Overall,victimlossesinthiscategorywereover4.5billionU.S.dollars.Businesse-mailcompromise(BEC)rankedsecond,amountingtoaround2.9billionU.S.dollarsinreportedvictimlosses.Afurther924millionU.S.dollarswerereportedinlossesfortechsupportfraudvictims.ReadmoreNote(s):UnitedStates;2023;crimesreportedtotheIC3Source(s):FBI;IC3CHAPTER

02CybercrimeinAustraliaNumberofcybercrimereportsmadetotheAustralianCyberSecurityCentreinAustraliafromfinancialyear2020tofinancialyear2023NumberofcybercrimesreportedtotheACSCinAustraliaFY2020-2023100,00094,00090,00080,00070,00060,00050,00040,00030,00020,00010,000076,00067,50059,806202020212022202310Description:TheAustralianCyberSecurityCentre(ACSC)receivedapproximately94thousandcybercrimereportsinthefinancialyear2023.Thenumberofreportshasincreasedincomparisontopreviousyears,withapproximately76thousandcybercrimereportsfiledinthefinancialyear2022.ReadmoreNote(s):Australia;financialyear2020tofinancialyear2023Source(s):AustralianCyberSecurityCentreDistributionofcybercrimeincidentsreportedtotheAustralianCyberSecurityCentreinAustraliainfinancialyear2022,bytypeShareofcybercrimeincidentsreportedtoACSCinAustraliaFY2022,bytype30%26.9%25%20%14.4%15%10%5%12.6%12.2%6.12%4.36%3.92%3.01%2.64%2.6%2.58%2.22%1.94%

1.79%1.75%0.59%0.37%0%11Description:Inthe2022financialyear,overonequarterofcybercrimeincidentsreportedtotheAustralianCyberSecurityCentrewerefraudrelated.Thesecondhighestshareofreportedthreatswereshoppingrelated.

ReadmoreNote(s):Australia;financialyear2022;Australia'sfinancialyearrunsfromJuly1toJune30;forexample,financialyear2017startsonJuly1,2016andendsonJune30,2017.Source(s):AustralianCyberSecurityCentreDistributionofcybersecuritythreatsreportedtotheAustralianCyberSecurityCentreinAustraliainfinancialyear2022,byaffectedsectorShareofcybersecurityincidentsreportedtoACSCinAustraliaFY2022,bysectorShareofcyberthreatsreported0%5%10%15%20%25%24%30%Government(Commonwealth)Government(state/territory/local)HealthcareandsocialassistanceInformationmediaandtelecommunicationsProfessional,scientificandtechnicalservicesEducationandtraining10%9%8%7%7%FinancialandinsuranceservicesManufacturing4%4%4%ConstructionElectricity,gas,water,andwasteservices3%12Description:Inthe2022financialyear,24percentofcybersecuritythreatsreportedtotheAustralianCyberSecurityCentrewerefromCommonwealthGovernmentagencies.Thesecondhighestshareofreportedthreatswerefromstateandterritoryandlocalgovernmentagencies.ReadmoreNote(s):Australia;financialyear2022Source(s):AustralianCyberSecurityCentreDistributionofcybercrimeincidentsreportedtotheAustralianCyberSecurityCentreinAustraliainfinancialyear2023,byjurisdictionShareofcybercrimeincidentsreportedtoACSCinAustraliaFY2023,bystate35%30%30%25%20%15%10%5%26%21%11%6%2%2%1%0%QueenslandVictoriaNewSouthWales

WesternAustralia

SouthAustraliaTasmaniaAustralianCapital

NorthernTerritoryTerritory13Description:Inthe2023financialyear,30percentofcybercrimeincidentsreportedtotheAustralianCyberSecurityCentrewerefromthestateofQueensland.Thesecond-highestshareofreportedthreatswasfromVictoria.

ReadmoreNote(s):Australia;financialyear2023;Australia'sfinancialyearrunsfromJuly1toJune30;forexample,financialyear2017startsonJuly1,2016andendsonJune30,2017.Source(s):AustralianCyberSecurityCentreAveragereportedfinanciallossofcybercrimeincidentsreportedtotheAustralianCyberSecurityCentreinAustraliainfinancialyear2023,byorganizationsize(inAustraliandollars)AveragelossofcyberincidentsreportedtoACSCinAustraliaFY2023,byorgsize120,00097,200100,00080,00060,00040,00020,000071,60046,000SmallbusinessMediumbusinessLargebusiness14Description:Inthe2023financialyear,theaveragefinanciallossofcybercrimeincidentsreportedtotheAustralianCyberSecurityCentrebymedium-sizedbusinesseswasaround97.2thousandAustraliandollars.Smallbusinessesreportedthelowestaveragefinanciallossofaround46thousandAustraliandollars.ReadmoreNote(s):Australia;financialyear2023;Australia'sfinancialyearrunsfromJuly1toJune30;forexample,financialyear2017startsonJuly1,2016andendsonJune30,2017.;*Reportaveragesonlythosecybercrimereportswherefinancialloss[...]

ReadmoreSource(s):AustralianCyberSecurityCentreCHAPTER

03RansomwareandmalwareNumberofreportedransomwareandmalwareattacksinAustraliain2023,bymonthReportedransomwareandmalwareattacksinAustralia2023,bymonth350317289300250200150100502872782612452432231851861071080JanuaryFebruaryMarchAprilMayJuneJulyAugustSeptemberOctoberNovember

December16Description:InJulyof2023,over317reportsofmalwareandransomwareattacksweremadetotheAustralianCompetitionandConsumerCommission.AlthoughthenumberofreportsmadeinJunewaslowerthaninJuly,theamountlostwashighestthatmonth,withovertwothousandAustraliandollarsreportedlylosttomalwareandransomwareattacksinJune.ReadmoreNote(s):Australia;2023Source(s):ACCCNumberofreportedransomwareandmalwareattacksinAustraliain2023,byagegroupNumberofreportedransomwareandmalwareattacksinAustralia2023,byage1,2001,00080098460045840030919820012996330Under1818to2425to3435to4445to5455to64Over6517Description:In2022inAustralia,around984reportsofransomwareandmalwareattacksweremadebypeopleaged65andovertotheAustralianCompetitionandConsumerCommission,resultingincloseto1.7thousandAustraliandollarsinmoneylost.Thoseagedunder18reportedtheleastnumberofattacks.ReadmoreNote(s):Australia;2023Source(s):ACCCNumberofreportedransomwareandmalwareattacksinAustraliain2023,bylocationNumberofransomwareandmalwareattacksinAustralia2023,bylocation8007006005004003002001000761585560301248WA130TAS103ACT26231NSWVICQLDSANTOverseasNotsupplied18Description:In2023inAustralia,over700reportsofransomwareandmalwareattacksweremadetotheAustralianCompetitionandConsumerCommissionbypeopleinNewSouthWales,resultinginover5.6thousandAustraliandollarsinmoneylost.InVictoria,over585Australiandollarswerereportedlylosttomalwareandransomwareattacks.ReadmoreNote(s):Australia;2023Source(s):ACCCDeliverymethodofreportedmalwareandransomwareattacksinAustraliain2023,bynumbersofreportsandamountlost(in1,000Australiandollars)DeliveryofransomwareattacksinAustralia2023,bynumberandamountlostAmountlostinthousandAustraliandollars7427Numberofreports8,0007,0006,0005,0004,0003,0002,0001,0000250020001500100050021844032296214006451431431113Internet00054MobileApplications50Socialnetworking5520EmailPhoneTextmessageInpersonMailFax19Description:In2023inAustralia,twothousandreportsofmalwareandransomwareattacksviaatextmessageweremadetotheAustralianCompetitionandConsumerCommission,resultinginreportedlossesof1.4thousandAustraliandollars.Thehighestamountofmoneywaslostviaphone.Reportsmadeabouttextmessagemalwareandransomwareattackswerethemostcommon.

ReadmoreNote(s):Australia;2023Source(s):ACCCCHAPTER

04ScamsNumberofreportedscamsinAustraliain2022,bycategoryNumberofscamreportsinAustralia2022,bycategoryNumberofscamreports010,00020,00030,00040,00050,00060,00070,00080,000PhishingOtherscamsFalsebilling74,57328,20327,488OnlineshoppingscamsIdentitytheft17,88616,212RemoteaccessscamsHacking11,79211,772ClassifiedscamsInvestmentscams10,6499,361Rebatescams4,4753,698DatingandromancescamsJobsandemploymentscamsInheritanceandunexpectedmoney3,3833,18621Description:PhishingwasthemostprevalentformofscaminAustraliain2022,withover74.5thousandincidentsreported.Therewerealsoaround27.5thousandreportsoffalsebilling.

ReadmoreNote(s):Australia;2022Source(s):ACCCReportedfinanciallossfromscamsinAustraliain2022,byleadingcategory(inmillionAustraliandollars)ReportedlossfromscamsinAustralia2022byleadingcategoryReportedlossinmillionAustraliandollars100

150

200050250300350400377.25InvestmentscamsDatingandromancescamsFalsebilling40.5824.8324.6221.76PhishingRemoteaccessscamsThreatstolife,arrestorotherIdentitytheft13.9310.749.7JobsandemploymentscamsOnlineshoppingscamsClassifiedscams9.268.4722Description:InAustraliain2022,investmentscamscreatedtotallossesofover377millionAustraliandollarsforvictims.Around40millionAustraliandollarsworthoflossescausedbydatingandromancescamswereincurredthatyear.

ReadmoreNote(s):Australia;2022Source(s):ACCCReportedfinanciallossfromscamsinAustraliain2022,bypaymentmethod(inmillionAustraliandollars)ReportedlossfromscamsinAustralia2022,bypaymentmethodReportedlossinmillionAustraliandollars100

150050200250Cryptocurrency*BanktransferCreditcard221.3210.412.123Description:InAustralia,lossesfromscamstotalingaround221millionAustraliandollarswerereportedasbeingpaidwithcryptocurrencyin2022.Paymentsmadeviabanktransactionsexceeded210millionAustraliandollarsthatyear.

ReadmoreNote(s):Australia;2022;*Removingsignificantlossoutliers,cryptocurrencylossesincreased90.2percentto160.6millionAustraliandollars.ReadmoreSource(s):ACCCMoneylossfromonlineshoppingscamsreportedinAustraliafrom2015to2022(inmillionAustraliandollars)OnlineshoppingscamlossinAustralia2015-20229876548.077.386.614.853.2832101.461.381.2820152016201720182019202020212022*24Description:AsofSeptember2022,around6.61millionAustraliandollarshadbeenlostinonlineshoppingscamsinAustralia.In2021,overeightmillionAustraliandollarshadbeenreportedasbeinglostthroughonlineshoppingscams.

ReadmoreNote(s):Australia;2015to2022;*AsofSeptember2022.Dateusedisdateofaccess.Valueshavebeenrounded.

ReadmoreSource(s):ACCCNumberofreportedscamattemptstogainpersonalinformationinAustraliain2023,byagegroupNumberofscamattemptstogainpersonalinfoinAustralia2023,byage45,00040,00035,00030,00025,00020,00015,00041,18322,18817,96915,83511,38110,0005,00004,203611Under1818to2425to3435to4445to5455to64Over6525Des