Canadian spy agency says it hacked drug traffickers, extremists and a ransomware gang last year

Offering a uncommon glimpse astatine the priorities of a apical spy organization, Canada’s Communications Security Establishment said it conducted a fistful of state-authorized hacks past twelvemonth successful bid to disrupt the operations of cause traffickers, convulsive extremists, and a ransomware gang.

The disclosures successful the Canadian quality agency’s yearly report underscore immoderate of the main nationalist information threats that look Canada and its closest allies: ranging from the import of amerciable drugs to cyberattacks. The spy agency, CSE, is tasked with collecting overseas intelligence, defending authorities systems, and disrupting online adversaries.

Published past week, the study says the CSE past twelvemonth carried retired 3 overseas “active cyber operations” — the word bureau uses to picture its cyberattacks connected overseas operations that endanger Canadian nationalist information and nationalist safety.

One of the operations, per the report, targeted cybercriminals extracurricular of Canada who were brokering the merchantability of chemicals utilized to make the synthetic opioid, fentanyl. The CSE collected quality connected the brokers, past conducted an cognition that “disrupted and diminished their quality to operate,” the study said.

Another progressive cognition progressive the postulation of signals quality — information produced from electronics and internet-connected devices — connected an overseas extremist radical that was spreading convulsive ideology and recruiting members, including successful Canada.

The study said the bureau analyzed the group’s organization, reach, and imaginable vulnerabilities to behaviour an cognition that “successfully undermined the group’s credibility and constricted their quality to radicalize and enlistee caller members.”

Another cognition progressive disrupting a ransomware-as-a-service cognition that fto hackers rent entree to a ransomware gang’s infrastructure to motorboat destructive extortion attacks. The CSE said its signals quality portion identified however the pack worked against the healthcare, transportation, and concern sectors successful Canada, past utilized an progressive cyber cognition that “rendered the group’s infrastructure inoperable.” The cognition besides deleted overmuch of the information connected the gang’s servers.

The bureau said it undertook concurrent “technical disruptions” against 10 of the astir important ransomware gangs targeting Canada to “make parts of their infrastructure unusable.”

The study did not accidental wherever the hackers, extremists oregon the ransomware pack were located, oregon the specifics of the operations that the CSE utilized to people them. It’s not uncommon for spy agencies to behaviour cyberattacks against their adversaries, but specified operations are seldom disclosed oregon elaborate to support the methods and techniques used.

Fort Meade, Maryland-based Cyber Command, which conducts cyber operations for the U.S. government, regularly carries retired “hunt forward” operations that impact sending cyber teams to allied nations to unafraid their networks and disrupt cyber operations launched by adversaries. The fig of U.S.-led hunt guardant operations person risen from a fewer fistful during 2018 to more than 2 twelve during 2025.

Canada’s CSE said it besides carried retired 1 antiaircraft cyber cognition during the twelvemonth to people a phishing run aimed astatine Canadian national authorities institutions and different important systems. The bureau said it disrupted the group’s infrastructure and “degraded their ability” to people Canadians.