Hackers compromised a server belonging to SunWater, a Queensland-based water supplier, and remained undetected for nine months.The attackers were on the server between August 2020 and May 2021 but are not believed to have exfiltrated any data. Instead, it's believed the attackers infected the server with custom malware to increase visitor traffic to an online video-sharing platform.The news was published in an auditing report by the Queensland Audit Office. The report outlined that the older and more vulnerable servers were compromised while the newer ones were left untouched, as well as raising concerns about an absence of proper security practices such as the Principle Of Least Privilege (POLP).The auditors went onto conduct a review of the controls of six water authorities in Australia and found that three of them were not up to standard.