Canada cyberspy agency blocked trillions of 'malicious actions' against feds last year
In the last year, Canada's cyberspy agency blocked on average 6.3 billion "malicious actions" a day against the federal government, and received ministerial authorization to conduct more active foreign cyber operations than ever before, a new report reveals.
In an ever-evolving online environment, with criminals, hackers and adversary state actors looking to exploit vulnerabilities in Canada— from taking down Prime Minister Justin Trudeau's website to much more malevolent goals—a new report from the Communications Security Establishment (CSE) details an increase in efforts undertaken in the last year.
According to , the agency's automated defences protected the federal government from 2.3 trillion "malicious actions," an average of 6.3 billion a day.
As the federal government's cyber security operations lead, CSE is mandated to focus on foreign intelligence, active and defensive cyber operations, and assisting federal partners with cyber protection with the goal of countering hostile state activity and cybercrime and disrupting foreign adversaries.
In the last year, approved by Defence Minister Anita Anand, CSE received authorization to conduct one defensive operation and three active operations; the most active operations since the Communications Security Establishment Act came into force in 2019.
While CSE isn't providing much specific detail about what all of these operations involved, the report does note that this year it did conduct active cyber operations to "disrupt and remove harmful terrorist content disseminated online by foreign, ideologically-motivated extremists."
"This disruption fractured the extremists’ group cohesion and significantly reduced their online reach and ability to recruit new members," said the agency in the report.
More broadly, in the last four years the agency has also conducted active cyber operations to counter hostile state activity, counter cybercrime, and assist the Canadian Armed Forces.These foreign cyber operation authorizations are valid for up to a year, and CSE is able to carry out multiple operations under a single authorization, though some can be "precautionary" and don't resolve in actions being taken.
"As always, there are parts of our work that we cannot share in a public report. We don’t identify specific targets of our signals intelligence gathering or foreign cyber operations. These are classified," said CSE Chief of CSE, Caroline Xavier, in the unclassified summary of the agency's work between April 1, 2022 and March 31, 2023.
The uptick in active operations comes after a 2022 federal budget boost of $273.7 million meant to bolster CSE's capabilities to conduct foreign operations for years to come.
As the report notes, all of the activities conducted by CSE's more than 3,200 employees are subject to external review by the National Security and Intelligence Review Agency (NSIRA) and the National Security and Intelligence Committee of Parliamentarians (NSICOP).
WHAT Â鶹´«Ã½ FOREIGN INTERFERENCE?
Thursday's report plainly states that foreign states "are attempting to influence and interfere with Canada’s society and democracy" in a number of ways, including espionage and online disinformation.
While the report doesn't draw a direct line between China and foreign election interference, as has been a central preoccupation for federal politicians in recent months, CSE does call out China for its diaspora intimidation tactics.
Canadian Security Intelligence Service Director David Vigneault, left to right, Royal Canadian Mounted Police Deputy Commissioner Michael Duheme, Communications Security Establishment Chief Caroline Xavier and Canadian Security Intelligence Service Deputy Director of Operations Michelle Tessier discuss where to sit before appearing at the Procedure and House Affairs committee on Parliament hill, in Ottawa, Thursday, March 2, 2023. THE CANADIAN PRESS/Adrian Wyld
Canadian Security Intelligence Service Director David Vigneault, left to right, Royal Canadian Mounted Police Deputy Commissioner Michael Duheme, Communications Security Establishment Chief Caroline Xavier and Canadian Security Intelligence Service Deputy Director of Operations Michelle Tessier discuss where to sit before appearing at the Procedure and House Affairs committee on Parliament hill, in Ottawa, Thursday, March 2, 2023. THE CANADIAN PRESS/Adrian Wyld
"Authoritarian states use a variety of means to monitor and intimidate diaspora populations around the world, including in Canada. An example of this is the issue of the People’s Republic of China operating 'police service stations' in Canada," reads the report.
Other than saying CSE "works with global and federal partners to mitigate the risks posed by these transnational repression activities," little detail is shared on what that mitigation looks like, though the agency outlined a series of ways CSE says it supports Canada's efforts to combat foreign interference.
These include:
- providing foreign signals intelligence to Government of Canada decision makers about the intentions, capabilities and activities of foreign-based threat actors;
- defending Canada’s federal elections infrastructure from malicious cyber activity;
- proactively helping democratic institutions improve their cyber security;
- sharing unclassified threat assessments with the public; and
- sharing information to help Canadians identify disinformation and protect their privacy and security online.
As part of a suite of measures meant to assuage concerns about the strength of Canada's intuitions in the face of foreign meddling, in March, Trudeau tapped NSICOP and NSIRA to launch external reviews of the 2019 and 2021 elections and how agencies including CSE responded.
In Thursday's report the agency said it has been providing information to these oversight bodies, and confirmed participation in the work done by former special rapporteur David Johnston.
A member of the Security and Intelligence Threats to Elections (SITE) Task Force engaged during the last two elections and the recent federal byelections, Thursday's report also notes that CSE has set up a dedicated point of contact that political parties can reach out to on cyber security matters, outside of election periods.
It appears that this line of communication was utilized last spring, when CSE briefed parties on the increased risk of Russian-backed cyber threat activity following the invasion of Ukraine.
"Representatives from five parties attended the briefing, which included cyber security recommendations. The Cyber Centre sent the content of the briefing to all 19 registered federal political parties," reads the report.
CSE said in the last year it has sought to expose and counter Russian disinformation social media campaigns, and has also supported Ukraine's cybersecurity by notifying them about "hostile cyber activities against Ukraine’s national infrastructure" and "vulnerabilities on their network infrastructure to prevent hostile activity" based on data shared proactively with CSE by the Ukrainian authorities.
COMMON SCAMS AND CRITICAL INFRASTRUCTURE
In addition to CSE's work providing foreign intelligence on cyber threats to Canada, the agency's "Cyber Centre" also works to alert industries and Canadians about emerging threats and tactics of state actors and cybercriminals online, and ways to protect themselves and their devices.
In the last year, hundreds of warnings have been issued, ranging from routine cyber hygiene advice to urgent alerts.
A recent example of this of a "significant threat from a state-sponsored cyber threat actor associated with the People’s Republic of China" that was targeting critical infrastructure.
Outreach to Canada's critical infrastructure providers has increased at CSE in the last year, because internet-connected control systems used to operate key pieces of machinery or process have been identified as "a high value target" for malicious actors, from being able to turn on or off lights to malfunctions and permanent damage.
As for the ways individuals can be targeted, one area highlighted in the report was phishing emails and texts, which CSE calls smishing, that contain links to unsavoury domains to try to harvest personal and financial information, or install malware on Canadians' devices.
Working with partners, including those in the telecommunications sector, CSE reported receiving more than 850,000 suspicious web links, of which 274,000 were malicious, and 12,700 were previously unknown scam attempts.
Among the most common types of scams reported to CSE last year were package scams, health product scams, survey scams and cryptocurrency investment scams.
During the pandemic, CSE began working to remove websites and email domains that were imitating federal entities, and that work has now expanded to ridding the internet of other sources of malicious content.
In the last year more than 3,167 government of Canada spoofs were blocked or removed, as were 306,000 other malicious domains.
Other key statistics highlighted in the report include that between 2022 and 2023, CSE produced more than 3,000 foreign intelligence reports for the federal government, and responded to more than 2,000 cybersecurity incidents affecting federal institutions and critical infrastructure.
In the report, Anand said that as cyber threat actors increase their activity, and CSE issues more warnings, it should be a "wake-up calls for us all."
"We must be clear-eyed about the threats we face, and we must work with all stakeholders, including partners around the world to defend our common interests," the minister said.
IN DEPTH
Jagmeet Singh pulls NDP out of deal with Trudeau Liberals, takes aim at Poilievre Conservatives
NDP Leader Jagmeet Singh has pulled his party out of the supply-and-confidence agreement that had been helping keep Prime Minister Justin Trudeau's minority Liberals in power.
'Not the result we wanted': Trudeau responds after surprise Conservative byelection win in Liberal stronghold
Conservative candidate Don Stewart winning the closely-watched Toronto-St. Paul's federal byelection, and delivering a stunning upset to Justin Trudeau's candidate Leslie Church in the long-time Liberal riding, has sent political shockwaves through both parties.
'We will go with the majority': Liberals slammed by opposition over proposal to delay next election
The federal Liberal government learned Friday it might have to retreat on a proposal within its electoral reform legislation to delay the next vote by one week, after all opposition parties came out to say they can't support it.
Budget 2024 prioritizes housing while taxing highest earners, deficit projected at $39.8B
In an effort to level the playing field for young people, in the 2024 federal budget, the government is targeting Canada's highest earners with new taxes in order to help offset billions in new spending to enhance the country's housing supply and social supports.
'One of the greatest': Former prime minister Brian Mulroney commemorated at state funeral
Prominent Canadians, political leaders, and family members remembered former prime minister and Progressive Conservative titan Brian Mulroney as an ambitious and compassionate nation-builder at his state funeral on Saturday.
Opinion
opinion Don Martin: Gusher of Liberal spending won't put out the fire in this dumpster
A Hail Mary rehash of the greatest hits from the Trudeau government’s three-week travelling pony-show, the 2024 federal budget takes aim at reversing the party’s popularity plunge in the under-40 set, writes political columnist Don Martin. But will it work before the next election?
opinion Don Martin: The doctor Trudeau dumped has a prescription for better health care
Political columnist Don Martin sat down with former federal health minister Jane Philpott, who's on a crusade to help fix Canada's broken health care system, and who declined to take any shots at the prime minister who dumped her from caucus.
opinion Don Martin: Trudeau's seeking shelter from the housing storm he helped create
While Justin Trudeau's recent housing announcements are generally drawing praise from experts, political columnist Don Martin argues there shouldn’t be any standing ovations for a prime minister who helped caused the problem in the first place.
opinion Don Martin: Poilievre has the field to himself as he races across the country to big crowds
It came to pass on Thursday evening that the confidentially predictable failure of the Official Opposition non-confidence motion went down with 204 Liberal, BQ and NDP nays to 116 Conservative yeas. But forcing Canada into a federal election campaign was never the point.
opinion Don Martin: How a beer break may have doomed the carbon tax hike
When the Liberal government chopped a planned beer excise tax hike to two per cent from 4.5 per cent and froze future increases until after the next election, says political columnist Don Martin, it almost guaranteed a similar carbon tax move in the offing.
CTVNews.ca Top Stories
Canadians across the country mark Remembrance Day
Canadians gathered Monday in cities and towns across the country to honour the sacrifice of men and women in uniform who gave their lives in service of the country's values and principles.
Canada cancels automatic 10-year multiple-entry visas, tightens rules
Canada has announced changes to their visitor visa policies, effectively ending the automatic issuance of 10-year multiple-entry visas, according to new rules outlined by Immigration, Refugees and Citizenship Canada.
Trump names Stephen Miller to be deputy chief of policy in new administration
U.S. President-elect Donald Trump is naming longtime adviser Stephen Miller, an immigration hard-liner, to be the deputy chief of policy in his new administration.
Mattel says it 'deeply' regrets misprint on 'Wicked' dolls packaging that links to porn site
Toy giant Mattel says it 'deeply' regrets an error on the packaging of its 'Wicked' movie-themed dolls, which mistakenly links toy buyers to a pornographic website.
Alien-like signal from 2023 has been decoded. The next step is to figure out what it means
If Earth's astronomical observatories were to pick up a signal from outer space, it would need an all-hands-on-deck effort to decipher the extraterrestrial message. A father-daughter team of citizen scientists recently deciphered the message. Its meaning, however, remains a mystery.
Twin port shutdowns risk more damage to Canadian economy: business groups
Business groups are raising concerns about the broad effects of another round of labour disruptions in the transport sector as Canada faces shutdowns at its two biggest ports.
A team of tornado experts is heading to Fergus, Ont. after a storm ripped through the area Sunday night.
Why brain aging can vary dramatically between people
Researchers are uncovering deeper insights into how the human brain ages and what factors may be tied to healthier cognitive aging, including exercising, avoiding tobacco, speaking a second language or even playing a musical instrument.
Bleeding and in pain, a woman endured a harrowing wait for miscarriage care due to Georgia's restrictive abortion law
Since the U.S. Supreme Court’s 2022 Dobbs decision eliminated the federal right to abortion, miscarriage management has become trickier and in some cases, deadlier.
Local Spotlight
Should Toronto tear up its bike lanes to improve traffic flow? Critics say it's not so simple
A congestion crisis, a traffic nightmare, or unrelenting gridlock -- whatever you call it, most agree that Toronto has a congestion problem. To alleviate some of the gridlock, the Ontario government has announced it plans to remove bike lanes from three major roadways.
For the second year in a row, the ‘Gift-a-Family’ campaign is hoping to make the holidays happier for children and families in need throughout Barrie.
Some of the most prolific photographers behind CTV Skywatch Pics of the Day use the medium for fun, therapy, and connection.
A young family from Codroy Valley, N.L., is happy to be on land and resting with their newborn daughter, Miley, after an overwhelming, yet exciting experience at sea.
As Connor Nijsse prepared to remove some old drywall during his garage renovation, he feared the worst.
A group of women in Chester, N.S., has been busy on the weekends making quilts – not for themselves, but for those in need.
A Vancouver artist whose streetside singing led to a chance encounter with one of the world's biggest musicians is encouraging aspiring performers to try their hand at busking.
Ten-thousand hand-knit poppies were taken from the Sanctuary Arts Centre and displayed on the fence surrounding the Dartmouth Cenotaph on Monday.
A Vancouver man is saying goodbye to his nine-to-five and embarking on a road trip from the Canadian Arctic to Antarctica.