What is cyber warfare? In simple terms, it is the use of cyber attacks by a state, or by groups acting on its behalf, to damage another country’s interests. That damage can mean stolen secrets, disrupted services, destroyed data or even physical harm to infrastructure. Because the attacks travel through ordinary networks, cyber warfare often hits companies and citizens as well as governments.
This guide defines the main terms, explains how cyber warfare differs from cybercrime and gives a short history of the most important incidents.
Key terms
Cyberspace
Cyberspace is the global domain of networks, computers, software, data and the people who use them. Unlike land or sea, humans created it, and private companies own most of it.
Cyber war vs cyber warfare
People often use these terms loosely. “Cyber war” usually means a conflict fought mainly through digital attacks. “Cyber warfare” is broader: it covers the methods and operations, including those that support a conventional war.
Information warfare
Information warfare is about controlling, protecting and exploiting information to gain an advantage. It includes cyber operations, electronic warfare and influence campaigns. Read more in our guide to information warfare and operations.
Command and control (C2)
In military terms, command and control means how commanders direct forces. In cyber security, C2 also describes the servers attackers use to control malware. Both meanings matter, because attacks on military C2 can paralyse forces, while defenders hunt for malware C2 traffic.
Cyber warfare vs cybercrime
| Cyber warfare | Cybercrime | |
|---|---|---|
| Main actor | States and their proxies | Criminal individuals and groups |
| Main motive | Strategic or political advantage | Money |
| Typical targets | Governments, military, critical infrastructure, key industries | Anyone with money or data |
| Example | Attacks on Ukraine’s power grid | Ransomware gangs extorting companies |
The line is blurry, though. Some states shelter criminal groups or use them as proxies, and criminals sometimes sell access to state actors.
Main forms of cyber warfare
- Espionage: stealing secrets from governments and companies.
- Sabotage: damaging systems, data or equipment.
- Disruption: denial-of-service attacks on websites and networks.
- Influence: propaganda, hack-and-leak and disinformation.
For examples of each, see our article on the types of cyber warfare.
A short history
- 1980s to 1990s: early intrusions, such as the “Cuckoo’s Egg” espionage case, show that networks can be used for spying.
- 2007: Estonia suffers weeks of DDoS attacks on government, banking and media sites.
- 2008: cyber attacks accompany the Russia-Georgia conflict.
- 2010: Stuxnet is discovered, the first widely known malware designed to cause physical damage.
- 2012: Shamoon wipes data on tens of thousands of Saudi Aramco computers.
- 2015 to 2016: attacks cause blackouts in Ukraine.
- 2017: NotPetya spreads worldwide and causes billions of dollars in damage.
- 2020: the SolarWinds supply chain compromise is revealed.
- 2022: cyber attacks, including on the Viasat KA-SAT network, accompany Russia’s full-scale invasion of Ukraine.
Why it matters to businesses
Most companies are not direct targets. Even so, they often suffer collateral damage, as NotPetya showed, or become stepping stones to bigger targets. Strong basics, such as patching, MFA, segmentation and offline backups, protect against both criminal and state attacks.
Related guides
Sources
Worried about targeted attacks on your business? Our VAPT services find weaknesses before attackers do, and our OSINT investigations show what is exposed about your organisation online. Contact us for a quote.
Pingback: Cyber Warfare Overview - Youngster Company