The report notes that over the past four years, at least 20 networks associated with federal agencies and departments have been compromised by Chinese cyber threat actors.

It adds that while all known federal compromises have been resolved, it is likely that the attackers devoted significant time and resources to learning about the target networks.

Among the other rulings in the report:

— Canada is highly likely to be a valuable espionage target for Russian state-sponsored cyber threat actors, including through supply chain compromises, given Canada’s membership in the North Atlantic Treaty Organization, support for Ukraine against Russian aggression, and presence in the Arctic;

— Iran’s increasing willingness to conduct disruptive cyber attacks beyond the Middle East and its persistent efforts to track and monitor regime opponents through cyberspace pose a growing cyber security challenge to Canada and its allies;

— Indian state-sponsored actors likely conduct cyber threat activities against federal networks for espionage purposes;

— the cybercrime-as-a-service model is supported by thriving online marketplaces where people sell stolen and leaked data and ready-to-use malicious tools to other cybercriminals; and

— ransomware is the biggest cybercrime threat facing Canada’s critical infrastructure, and over the next two years, perpetrators are expected to step up their extortion tactics and hone their capabilities to increase pressure on victims to to pay ransoms.

This report by The Canadian Press was first published on October 30, 2024.

Jim Bronskill, Canadian Press