A Pakistani security guard injured in the Sydney attack has succumbed to his injuries, while another continues to fight for his life.

The guard, identified as Ahmad Tahir had sustained injuries in the attack and had been taken to the hospital but could not survive.

Another security guard of Pakistani origin is under treatment at the Royal Prince Alfred Hospital.

Five women and a male security guard were killed in the Saturday attack in the Sydney suburb of Bondi, police confirmed on Sunday, adding that 12 people remained in hospital.

Prime Minister Anthony Albanese said on Sunday he had received condolence messages from around the world, and in the Vatican, a top cardinal said Pope Francis was “deeply saddened to learn of the violent attack in Sydney”.

“He sends the assurance of his spiritual closeness to all affected by this senseless tragedy, especially those who are now mourning the loss of a loved one,” the Vatican telegram said.

The attacker, identified by police as Joel Cauchi, was known to police in the neighbouring state of Queensland, and police have spoken to his family after Saturday’s attack, New South Wales Police Assistant Commissioner Anthony Cooke told a press conference.

Witnesses described how Cauchi, wearing shorts and an Australian national rugby league jersey, ran through the Westfield Bondi Junction mall with a knife, randomly attacking people.

Some shoppers and staff at the mall in Sydney’s east tried to stop him and crowds sheltered in shuttered shops.

“We have seen the footage of ordinary Australians putting themselves in harm’s way in order to help their fellow citizens. That bravery was quite extraordinary,” Prime Minister Anthony Albanese said on Sunday. “It’s the best of Australians amidst this tragedy.”