In cyber warfare, attackers choose targets that give them the most strategic value for the least risk. Some targets are obvious, such as military networks. Others, like a software vendor or a regional power company, matter because of what they connect to. Understanding typical cyber warfare targets helps organizations judge their own risk.
Overview
| Target | Why attackers want it | Example |
|---|---|---|
| Military systems | Disrupt command, intelligence and logistics | Attacks on communications at the start of a conflict |
| Government agencies | Steal secrets, embarrass or disrupt | SolarWinds-related breaches of US agencies (2020) |
| Energy and utilities | Cause blackouts and public pressure | Ukraine grid attacks (2015, 2016) |
| Telecom and satellites | Cut communications | Viasat KA-SAT attack (2022) |
| Finance | Disrupt markets or steal funds | Bangladesh Bank heist (2016) |
| Healthcare | Disrupt services, steal research | Attacks on hospitals and vaccine research during COVID-19 |
| Elections | Undermine trust in democracy | Hack-and-leak and disinformation campaigns |
| Supply chains and IT providers | Reach many victims at once | NotPetya via accounting software (2017) |
| Media | Spread propaganda or silence reporting | Defacements and account takeovers |
Critical infrastructure
Power, water, transport, telecom and finance support everything else. Attacks here can affect millions of people, which gives attackers political leverage. Industrial control systems are especially sensitive, because they were often designed for reliability rather than security. India protects such systems through NCIIPC, which works with operators in critical sectors.
Government and defence
Ministries, defence contractors and research agencies hold valuable secrets. Most attacks on them are espionage: quiet, long-term access to email and documents. Sometimes, however, attackers leak stolen material to cause political damage.
Elections and democratic institutions
Election systems, political parties and media are common targets. Attackers may try to change data, but more often they aim to create doubt, for example through leaks, fake news and attacks on public websites on voting day.
Financial institutions
Banks and payment systems attract both state and criminal attackers. In 2016, attackers used the SWIFT network to steal about $81 million from Bangladesh Bank; investigators linked the operation to North Korean groups.
Businesses as stepping stones
Many companies become targets because of who they serve. IT service providers, software vendors and cloud platforms give access to many customers at once. Small suppliers to large manufacturers or government bodies are also attractive, because their defences are often weaker.
People
Ultimately, many attacks start with people: officials, engineers and administrators who receive phishing emails or fake job offers. Their accounts open the door to everything else.
How to reduce your risk
- Identify whether you are part of a critical sector or supply chain.
- Patch internet-facing systems quickly and use phishing-resistant MFA.
- Segment networks, especially between IT and operational technology.
- Keep offline backups and test recovery.
- Monitor for unusual logins and data transfers.
- Follow CERT-In advisories and report incidents promptly.
Related guides
Sources
Worried about targeted attacks on your business? Our VAPT services find weaknesses before attackers do, and our OSINT investigations show what is exposed about your organisation online. Contact us for a quote.
