On June 19, Prime Minister Scott Morrison said Australian organisations were "being targeted by a sophisticated state-based cyber actor".

The accompanying advisory notice from the Australian Cyber Security Centre set out an attack that seemed to follow fairly standard approaches: web-based exploitation, spear-fishing, and seeking entry into organisations through the front door, hoping – softly, softly – to be lost in the noise.