'Unsophisticated' cyberattack reflective of govt 'under-investment in cybersecurity'