“I hope it [using passwords] is over. What we need is more technologies that enable multi-factor authentication, so that you are never solely reliant on a username and a password,” she said.

The Australian Signals Directorate (ASD) has reported handling over 1,200 cybersecurity incidents, marking an 11% rise from the previous year, 2023-24.

“We need anything, all accounts, must have multi-factor authentication. You need to roll your creds, that’s the language we use, change your passwords increasingly regularly. Don’t use it across multiple devices,” Bradshaw said.

“Once access is gained, they mimic legitimate user behaviour to steal sensitive personal or corporate information, install ransomware or malware and take over accounts,” she said.

“Once cybercriminals gain access, they often imitate legitimate user behavior to extract sensitive personal or corporate information, install ransomware or malware, and take control of accounts,” she warned.

Cybersecurity Minister Tony Burke acknowledged work by the signals directorate “protects Australians every day”, but also said there are steps users can take to keep themselves safe online.

“Most cyber incidents are preventable, and basic defensive measures make a huge difference,” he said.

How to keep yourself safe from cybercrime

“What that enables them [cyber criminals] to do is use a username and password to get onto an individual’s device, or, if they’re lucky enough, they’ve also been able to take usernames and passwords for people’s corporate accounts,” he told SBS News.

The average self-reported cost of cybercrime per report for small businesses rose by 14 per cent to $56,600, while the cost to individuals rose 8 per cent to $33,000. Source: SBS News

When using passwords, the phrases need to remain unique, while reputable password managers can ensure passwords are not reused.

Last year, the ASD responded to 1,200 incidents and blocked access to 334 million malicious domains.

Businesses issued warning ahead of 2030

The technology anticipated will be able to unscramble this messaging quickly, making businesses more susceptible to data decryption or hacking.