Canada’s electronic spy agency waging ‘long-term’ campaign against cyber criminals

The Communications Security Establishment (CSE) has been warning about the increased threat 'ransomware' attacks are posing to Canadian individuals and institutions.

Canada’s electronic intelligence agency says it’s waging a “long-term” campaign aimed at degrading cyber criminals’ abilities to target Canadian individuals and institutions.

The Communications Security Establishment (CSE) has been warning for some time that “ransomware” attacks – where hackers lock up or steal data and demand money for its return – are a growing threat for Canadian individuals and institutions.

The agency’s latest annual report, released Tuesday, made clear CSE believes that threat will remain persistent for the foreseeable future.

CSE is “not under the illusion that we’re going to fix that problem in the short term,” Dan Rogers, the agency’s associate chief, said in a rare interview Tuesday.

“We realize this is a long-term problem and something that’s going to affect Canadians for some time.”

The agency reported late last year it was aware of 235 ransomware attacks in Canada between January and November of 2021, and that half of those attacks were directed at critical infrastructure providers – which includes sectors like health, manufacturing and energy.

It’s almost certain that many more attacks go unreported to federal authorities. But the most high-profile incidents – like last year’s attack on Colonial Pipeline, which stalled oil products to the U.S. East Coast – have driven home how costly and impactful ransomware can be.

Global News first reported in December 2021 that CSE was using new powers to target cyber criminals. It was the first time the agency has acknowledged the use of new “active cyber operations” authorities, which allow CSE to “disrupt the capabilities” of foreign threats to Canada.