Cybersecurity incident — 2020-01-03 00:00:00
Affected organization: Office of Mark McGowan
Affected country: Australia
Industry: Public Administration
Event type: Exploitive
Event subtype: Exploitation of End Hosts
Motive: Political-Espionage
Actor: APT30
Actor type: Nation-State
Actor country: China

Using a new exploit named Aria-body, APT 30 attempted to compromise networks belonging to governments and state-owned companies in Australia and Southeast Asia. One of the group's targets is the office of Mark McGowan, Western Australia's premier. The hackers compromised a computer at the Indonesian embassy in Canberra and sent a malicious document to a staff member at McGowan's office from that machine.