The compromise of several global MSPs was reported in 2017. In response, the ACSC provided stakeholders with the information they needed to protect themselves and others from this threat. Impacted MSPs were informed.
In 2018, sophisticated cyber adversaries continue to target and compromise MSPs and, through them, their customers. The ACSC reiterates the need for organisations to scrutinise the cyber security measures implemented in contracted ICT solutions to combat the threat.