Cyber & Sector Awareness
Loading...
Australian Cyber Threat Tracker
Source: ACSC Annual Cyber Threat Report 2024–25
FY 2025–26 (Live Projection)
FY 2024–25 (Official Report)
🌐 Live Threat Map
🛡 Cyber Awareness
Estimated cybercrime reports — FY 2025–26
0
One report every 6 minutes · Counting from 1 July 2025
Projected from ACSC 2024–25 annual rate of 84,700 reports/year
0
Projected incidents this FY
$80,850
Avg cost per business incident
$33,000
Avg individual loss per incident
0
Projected malicious domains blocked
Recent CVEs — High / Critical
Loading CVEs...
Latest
Loading...
84,700
↑ Consistent with prior year
Cybercrime reports received in FY2024–25
1,200+
↑ 11% year on year
Significant incidents responded to
42,500+
↑ 16% year on year
Calls to the Cyber Security Hotline
$80,850
↑ 50% year on year
Avg cost per business cybercrime report
334M
↑ 307% year on year
Malicious domains blocked by ASD
1,700+
↑ 83% year on year
Entities notified of malicious activity
Key findings from the report
Critical infrastructure attacks up 111% — finance (32%) and transport (26%) most targeted
Healthcare ransomware incidents doubled — 95% resulted in confirmed compromise
DoS/DDoS attacks rose 280% — over 200 incidents in FY2024–25
Large business avg loss jumped 219% to $202,700 per incident
Identity fraud remains #1 reported cybercrime — avg individual loss $33,000
State-sponsored actors from China and Russia actively targeting Australian networks
39% of ransomware incidents detected by ACSC before the organisation knew
Mandatory ransomware reporting introduced for businesses over $3M turnover
Ransomware
11%
Identity fraud
8%
Online shopping
7%
Banking fraud
6%
Other
68%
ASD's ACSC Annual Cyber Threat Report 2024–25 · Published October 2025 · cyber.gov.au
Crime type distribution — FY 2024–25
Ransomware 11% Identity fraud 8% Online shopping 7% Banking fraud 6% Other 68%
Quick view
Live threat maps are hosted by security vendors and cannot be embedded — they open in a new tab. Attack volumes reflect each vendor's own sensor network.
🌐
Kaspersky Cyberthreat Real-Time Map
The most visually detailed live threat map available. Shows malware infections, network attacks, on-access scans and vulnerabilities detected across Kaspersky's global sensor network in real time.
Open Kaspersky Map ↗
Practical steps to stay safe — share these with anyone who needs them.
⚠️ Protecting yourself from scams
  • Never click links in unexpected texts or emails — go directly to the website
  • Government agencies (ATO, MyGov, Medicare) will never call and ask for payment
  • If someone calls claiming to be your bank, hang up and call the number on your card
  • Check ScamWatch before acting on any unexpected contact
  • Enable multi-factor authentication on email, banking and MyGov
🎣 Spotting phishing emails
  • Check the sender's actual email address — not just the display name
  • Hover over links before clicking — does the URL match the claimed sender?
  • Urgent language ("act now", "your account is suspended") is a red flag
  • Unexpected attachments — even from known senders — can be dangerous
  • When in doubt, report to your IT team before opening anything
🔑 Strong passwords & MFA
  • Use a passphrase — four random words are stronger than P@ssw0rd!
  • Never reuse passwords across work and personal accounts
  • Use a password manager — your browser's built-in one is a good start
  • Turn on MFA (multi-factor authentication) on every account that offers it
  • Change passwords immediately if you suspect you've been compromised
🌐 Safe browsing & devices
  • Keep your OS, browser and apps updated — updates patch security holes
  • Avoid using public Wi-Fi for work — use your phone's hotspot instead
  • Lock your screen when stepping away from your computer
  • Don't plug unknown USB drives into your work device
  • Only download software from official sources
🤖 Using AI tools safely
  • Never paste student personal information into public AI tools (ChatGPT, Gemini etc.)
  • Don't share confidential organisational data or credentials with AI assistants
  • AI-generated content should always be reviewed before sending to students or partners
  • Check your organisation's AI use policy before using new tools for work
  • Deepfake audio/video is increasingly used in scams — verify unexpected requests
📢 If something goes wrong
  • Tell someone immediately — early reporting limits damage significantly
  • Report cybercrime to cyber.gov.au or call 1300 CYBER1
  • Report scams to ScamWatch
  • Contact your bank immediately if financial information was shared
  • Document everything — screenshots, times, what happened
Topic
Audience
Relevance
Threat
Loading articles...
Staff Tips
Coming soon — App tips for your team Weekly tips for Microsoft 365, Google Workspace, Zoom, Asana and more.
This section will auto-populate once the tips feed is configured.