Media Statement on our responses to APTs
19 July 2025
CSA is leading investigations into UNC3886 activities within critical infrastructure. Working with partners, CSA is monitoring all sectors and sharing intelligence to enable preventive measures while maintaining operational security.
MEDIA STATEMENT
1 We have been investigating UNC3886’s activities since it was detected in parts of our critical infrastructure. CSA is leading the investigations, and is working closely with relevant agencies and partners to support affected organisations. In addition, we are monitoring all critical sectors and sharing threat intelligence so that they can take preventive measures. These attacks are often protracted campaigns and CSA will need to preserve operational security by not disclosing further information at this stage.
