Cyber warfare is not one kind of attack. It ranges from quiet espionage that lasts for years to sudden attacks that switch off electricity. Understanding the main types of cyber warfare helps governments and businesses decide what to protect first and which warning signs to watch for.
Below are seven common types, each with a real, well-documented example and the key defences.
Overview
| Type | Main goal | Example |
|---|---|---|
| Espionage | Steal secrets | SolarWinds supply chain compromise (2020) |
| Sabotage | Damage systems or equipment | Stuxnet (discovered 2010) |
| DDoS | Disrupt online services | Estonia (2007) |
| Power grid attacks | Cause blackouts | Ukraine (2015 and 2016) |
| Propaganda | Shape public opinion | Hack-and-leak and fake account campaigns |
| Economic disruption | Hit companies and markets | NotPetya (2017) |
| Surprise attacks | Gain advantage at the start of a conflict | Viasat KA-SAT (2022) |
1. Espionage
Espionage is the most common form of state cyber activity. Attackers break into networks to steal diplomatic, military, research or commercial information, often staying hidden for months. For example, the SolarWinds compromise gave Russian intelligence access to US government agencies and many companies through a trusted software update. Read our SolarWinds case study for details.
Key defences: monitoring for unusual logins and data transfers, least privilege, and supplier security reviews.
2. Sabotage
Sabotage aims to damage or destroy systems. Stuxnet, discovered in 2010, manipulated industrial controllers at Iran’s Natanz facility and damaged uranium enrichment centrifuges. Wiper malware, which destroys data, is another form of sabotage.
Key defences: offline backups, segmentation of industrial networks and strict control of removable media.
3. Denial-of-service attacks
A distributed denial-of-service (DDoS) attack floods a website or network with traffic until it stops responding. In 2007, Estonia faced weeks of DDoS attacks on government, bank and media websites during a political dispute with Russia.
Key defences: DDoS protection services, extra capacity and plans to keep critical services available.
4. Attacks on power grids
Electricity supports everything else, so grids are high-value targets. In December 2015, attackers cut power to about 225,000 customers in Ukraine for several hours. A year later, the Industroyer malware caused another outage in Kyiv.
Key defences: separating operational technology from IT, monitoring control networks and practising manual operations.
5. Propaganda and influence
Propaganda attacks use stolen data, fake accounts and false stories to shape opinion or weaken trust in institutions. They are cheap and can reach millions quickly. Learn more in our guide to psychological warfare.
Key defences: fast, credible public communication and verification of sensitive claims.
6. Economic disruption
Some attacks target the economy rather than the military. NotPetya, released in 2017 through a Ukrainian accounting software update, spread worldwide and hit shipping, pharmaceutical and manufacturing firms. Later estimates put total damage at around $10 billion.
Key defences: patching, segmentation and tested recovery plans.
7. Surprise attacks
Cyber attacks can open a conflict, blinding or confusing the opponent before conventional action. On 24 February 2022, a cyber attack on Viasat’s KA-SAT network disrupted satellite communications in Ukraine and across parts of Europe as Russia’s full-scale invasion began.
Key defences: redundant communications and incident response plans for crisis periods.
Is every cyber attack an act of war?
No. There is no universal definition of when a cyber attack becomes an act of war. Most states say an operation that causes death or physical destruction comparable to a conventional attack could qualify. Most incidents, however, fall below that threshold. Our article on cyberwarfare, law and ethics explains the debate.
Sources
Worried about targeted attacks on your business? Our VAPT services find weaknesses before attackers do, and our OSINT investigations show what is exposed about your organisation online. Contact us for a quote.
