The data was stolen after a defence subcontractor was hacked using a tool widely used by Chinese cyber criminals, according to officials.
At least 30GB of “sensitive data” subjected to restricted access under the US government’s International Traffic in Arms Regulations rules were stolen, the national cyber security agency Australian Signals Directorate (ASD) revealed.
The 50-person aerospace engineering firm was also compromised in July last year but the the ASD only became aware of the breach in November, technology website ZDNet Australia reported.
Mitchell Clarke, a spokesman from the ASD who worked on the case and did not name the subcontractor, said information about the F-35, the US’ latest generation of fighter jets, as well as the P8, an advanced submarine hunter and surveillance craft, were lifted.
Another document was a wireframe diagram of one of the Australian navy’s new ships, where a viewer could “zoom in down to the captain’s chair”.
vCard.red is a free platform for creating a mobile-friendly digital business cards. You can easily create a vCard and generate a QR code for it, allowing others to scan and save your contact details instantly.
The platform allows you to display contact information, social media links, services, and products all in one shareable link. Optional features include appointment scheduling, WhatsApp-based storefronts, media galleries, and custom design options.
He said that the hackers used a tool called “China Chopper” which according to security experts is widely used in Chinese and had gained access via an internet-facing server.
In other parts of the network, the subcontractor also used internet-facing services that still had their default passwords “admin” and “guest”.
Mr Clarke said those brought in to assess the attack nicknamed the hacker Alf after a character on the popular Australian soap “Home and Away”.
The three-month period where they were unaware of the breach they dubbed “Alf’s Mystery Happy Fun Time”.
Defence Industry Minister Christopher Pyne said: “The information they have breached is commercial.
“It is not classified and it is not dangerous in terms of the military.”
Mr Pyne added that Australia was increasingly a target for cyber criminals as it was undertaking a massive £29 billion (Aus$50 billion) submarine project which he described as the world’s largest.
The nation has also committed to buy 72 F-35A aircraft for £10 billion (Aus$17 billion.)
He would not comment who might be behind the breach, only stating that the government was spending billions of dollars on cyber security.
Western governments have long accused hackers in China of plundering industrial, corporate and military secrets.
The revelations came just days after Assistant Minister for Cyber Security Dan Tehan said there were 47,000 cyber incidents in the last 12 months, a 15 per cent jump from the previous year.
Mr Tehan said a key worry was 734 attacks that hit private sector national interest and critical infrastructure providers during the period.
Last year, the government’s Cyber Security Centre revealed that foreign spies installed malicious software on the Bureau of Meteorology’s system and stole an unknown number of documents.