Australia said it was concerned that one in 10 cyber security incidents last year involved critical infrastructure, with state-sponsored actors targeting the country's government, infrastructure and businesses using evolving tradecraft.
The Australian Signals Directorate said in a report over 11 percent of cyber security incidents last year related to critical infrastructure, including electricity, gas, water, education and transport services.
Of these, a quarter were phishing incidents, 21 percent were exploitation of a public-facing interface, and 15 percent brute-force activities.
"We are worryingly seeing an increased focus by both cyber criminals and state actors on our critical infrastructure," Defence Minister Richard Marles said in a radio interview with the Australian Broadcasting Corporation.
Australia had joined international partners in attributing cyber incidents over the year to China, Russia and Iran, he added.
China was evolving cyber techniques, with the choice of targets and behaviour "consistent with pre-positioning for disruptive effects rather than traditional cyber espionage operations", the report said.
Beijing has repeatedly denied claims by the US and Australian governments that it has used hackers to break into foreign computer systems.