View source for Cyberterrorism

{{Short description|Use of the Internet to threaten or cause seriously damage for political or ideological goals}}

'''Cyberterrorism''' is the use of the [[Internet]] to conduct violent acts that result in, or threaten, the loss of life or significant bodily harm, in order to achieve political or ideological gains through threat or intimidation. Acts of deliberate, large-scale disruption of [[Computer network|computer network]]s, especially of personal computers attached to the Internet by means of tools such as computer viruses, [[Computer worm|computer worm]]s, [[Phishing|phishing]], malicious software, hardware methods, programming scripts can all be forms of internet terrorism.<ref>{{Cite web|title=Botnets, Cybercrime, and Cyberterrorism: Vulnerabilities and Policy Issues for Congress|url=https://www.everycrsreport.com/reports/RL32114.html|access-date=5 September 2021|website=www.everycrsreport.com|language=en}}</ref> Cyberterrorism is a controversial term.{{Citation needed|reason=Are there examples of individuals or groups becoming upset due to this term|date=October 2021}} Some authors opt for a very narrow definition, relating to deployment by known terrorist organizations of disruption attacks against information systems for the primary purpose of creating alarm, panic, or physical disruption. Other authors prefer a broader definition, which includes [[Cybercrime|cybercrime]]. Participating in a [[Cyberattack|cyberattack]] affects the terror threat perception, even if it isn't done with a violent approach.<ref>{{Cite journal|last1=Canetti|first1=Daphna|last2=Gross|first2=Michael|last3=Waismel-Manor|first3=Israel|last4=Levanon|first4=Asaf|last5=Cohen|first5=Hagit|date=1 February 2017|title=How Cyberattacks Terrorize: Cortisol and Personal Insecurity Jump in the Wake of Cyberattacks|journal=Cyberpsychology, Behavior, and Social Networking|language=en|volume=20|issue=2|pages=72–77|doi=10.1089/cyber.2016.0338|pmid=28121462}}</ref> By some definitions, it might be difficult to distinguish which instances of online activities are cyberterrorism or cybercrime.<ref name="Cyberterrorism">{{cite book|last1=Hower|first1=Sara|last2=Uradnik|first2=Kathleen|title=Cyberterrorism|date=2011|publisher=Greenwood|location=Santa Barbara, CA|pages=140–149|edition=1st|url=https://books.google.com/books?id=uarFTBpg11wC|isbn=9780313343131}}</ref>

Cyberterrorism can be also defined as the intentional use of computers, networks, and public internet to cause destruction and harm for personal objectives. Experienced cyberterrorists, who are very skilled in terms of hacking can cause massive damage to government systems and might leave a country in fear of further attacks.<ref name="books.google.com">{{cite book|last1=Laqueur|first1=Walter|last2=C.|first2=Smith|last3=Spector|first3=Michael|title=Cyberterrorism|date=2002|publisher=Facts on File|pages=52–53|url=https://books.google.com/books?id=H7fT0BQxwDsC&pg=PA49|isbn=9781438110196}}</ref> The objectives of such terrorists may be political or ideological since this can be considered a form of terror.<ref>{{cite journal|title=India Quarterly : a Journal of International Affairs|publisher=Indian Council of World Affairs|date=1986|volume=42–43|page=122|quote=The difficulty of defining terrorism has led to the cliche that one man's terrorist is another man's freedom fighter}}</ref>

There is much concern from government and media sources about potential damage that could be caused by cyberterrorism, and this has prompted efforts by government agencies such as the Federal Bureau of Investigation (FBI) and the Central Intelligence Agency (CIA) to put an end to cyber attacks and cyberterrorism.<ref name="books.google.com"/>

There have been several major and minor instances of cyberterrorism. [[Religion:Al-Qaeda|Al-Qaeda]] utilized the internet to communicate with supporters and even to recruit new members.<ref>{{cite journal|last1=Worth|first1=Robert|title=Terror on the Internet: The New Arena, The New Challenges|journal=New York Times Book Review|date=25 June 2016|page=21|url=https://www.nytimes.com/2006/06/25/books/review/25worth.html|access-date=5 December 2016}}</ref> Estonia, a Baltic country which is constantly evolving in terms of technology, became a battleground for cyberterrorism in [[2007 cyberattacks on Estonia|April 2007]] after disputes regarding the relocation of a WWII soviet statue located in Estonia's capital Tallinn.<ref name="Cyberterrorism"/>

==Overview==
There is debate over the basic definition of the scope of cyberterrorism. These definitions can be narrow such as the use of Internet to attack other systems in the Internet that result to violence against persons or property.<ref name=":0">{{Cite book|title=Responses to Cyber Terrorism|author=Centre of Excellence Defence Against Terrorism|publisher=IOS Press|year=2008|isbn=9781586038366|location=Amsterdam|pages=34}}</ref> They can also be broad, those that include any form  of Internet usage by terrorists to conventional attacks on information technology infrastructures.<ref name=":0" /> There is variation in qualification by motivation, targets, methods, and centrality of computer use in the act. U.S. government agencies also use varying definitions and that none of these have so far attempted to introduce a standard that is binding outside of their sphere of influence.<ref>{{Cite book|title=The Internet Encyclopedia, Vol. 1|last=Bidgoli|first=Hossein|publisher=John Wiley & Sons|year=2004|isbn=978-0471222026|location=Hoboken, NJ|pages=354}}</ref>

Depending on context, cyberterrorism may overlap considerably with [[Cybercrime|cybercrime]], cyberwar or ordinary [[Social:Terrorism|terrorism]].<ref>{{cite web |url=http://www.hlrecord.org/news/what-is-cyberterrorism-even-experts-can-t-agree-1.861186 |title=What is cyberterrorism? Even experts can't agree |access-date=5 November 2009 |url-status=dead |archive-url=https://web.archive.org/web/20091112093639/http://www.hlrecord.org/news/what-is-cyberterrorism-even-experts-can-t-agree-1.861186 |archive-date=12 November 2009 }}. Harvard Law Record. Victoria Baranetsky. 5 November 2009.</ref> Eugene Kaspersky, founder of [[Company:Kaspersky Lab|Kaspersky Lab]], now feels that "cyberterrorism" is a more accurate term than "[[Cyberwarfare|cyberwar]]". He states that "with today's attacks, you are clueless about who did it or when they will strike again. It's not cyber-war, but cyberterrorism."<ref name="Kaspersky1">[http://www.timesofisrael.com/experts-we-lost-the-cyber-war-now-were-in-the-era-of-cyber-terror/ "Latest viruses could mean 'end of world as we know it,' says man who discovered Flame"], ''The Times of Israel'', 6 June 2012</ref> He also equates large-scale cyber weapons, such as the [[Flame (malware)|Flame Virus]] and NetTraveler Virus which his company discovered, to biological weapons, claiming that in an interconnected world, they have the potential to be equally destructive.<ref name="Kaspersky1" /><ref name="Kaspersky2">[http://www.timesofisrael.com/new-cyber-bug-targeting-middle-east-but-israel-untouched-so-far/ "Cyber espionage bug attacking Middle East, but Israel untouched — so far"], ''The Times of Israel'', 4 June 2013</ref>

If cyberterrorism is treated similarly to traditional [[Social:Terrorism|terrorism]], then it only includes attacks that threaten property or lives, and can be defined as the leveraging of a target's computers and information, particularly via the [[Internet]], to cause physical, real-world harm or severe disruption of infrastructure.

Many academics and researchers who specialize in terrorism studies suggest that cyberterrorism does not exist and is really a matter of hacking or [[Information warfare|information warfare]].<ref>{{Cite journal|last=Iqbal|first=Mohammad|title=Defining Cyberterrorism|url=https://repository.law.uic.edu/cgi/viewcontent.cgi?article=1091&context=jitpl|journal=The John Marshall Journal of Information Technology & Privacy Law|volume=22|issue=2|pages=397–408}}</ref> They disagree with labeling it as terrorism because of the unlikelihood of the creation of fear, significant physical harm, or death in a population using electronic means, considering current attack and protective technologies.

If death or physical damage that could cause human harm is considered a necessary part of the cyberterrorism definition, then there have been few identifiable incidents of cyberterrorism, although there has been much policy research and public concern. Modern terrorism and political violence is not easily defined, however, and some scholars assert that it is now "unbounded" and not exclusively concerned with physical damage.<ref>{{cite book|last=Ruggiero|first=Vincenzo|title=Understanding Political Violence: A Criminological Approach|url=https://books.google.com/books?id=_XbiI0CgoksC&q=political%20violence%20is%20unbounded&pg=PA162|publisher=McGraw Hill|access-date=13 August 2018|isbn=9780335217519|date=1 March 2006}}</ref>

There is an old saying that death or loss of property are the side products of terrorism, the main purpose of such incidents is to ''create terror'' in peoples' minds and harm bystanders. If any incident in [[Cyberspace|cyberspace]] can ''create terror'', it may be rightly called cyberterrorism. For those affected by such acts, the fears of cyberterrorism are quite real.<ref>{{cite journal|last=Gross|first=Michael|title=The psychological effects of cyber terrorism|journal=The Bulletin of the Atomic Scientists|volume=72|issue=5|pages=284–291|publisher=National Institutes of Health|pmc=5370589|year=2016|pmid=28366962|doi=10.1080/00963402.2016.1216502|bibcode=2016BuAtS..72e.284G}}</ref>

As with cybercrime in general, the threshold of required knowledge and skills to perpetrate acts of cyberterrorism has been steadily diminishing thanks to freely available hacking suites and online courses.<ref>{{cite web|title=National Crime Agency Intelligence Assessment:Pathways into Cybercrime|url=http://www.nationalcrimeagency.gov.uk/publications/791-pathways-into-cyber-crime/file|publisher=National Crime Agency|access-date=13 August 2018|archive-url=https://web.archive.org/web/20180813111825/http://www.nationalcrimeagency.gov.uk/publications/791-pathways-into-cyber-crime/file|archive-date=13 August 2018|url-status=dead}}</ref>  Additionally, the physical and virtual worlds are merging at an accelerated rate, making for many more targets of opportunity which is evidenced by such notable cyber attacks as [[Engineering:Stuxnet|Stuxnet]], the Saudi petrochemical sabotage attempt in 2018 and others.<ref>{{cite news|last=Rudawski|first=Anna|title=The Future of Cyber Threats: When Attacks Cause Physical Harm|url=https://www.law.com/newyorklawjournal/2018/06/01/the-future-of-cyber-threats-when-attacks-cause-physical-harm/?slreturn=20180713033135|newspaper=New York Law Journal|access-date=13 August 2018}}</ref>

===Defining cyberterrorism===

Assigning a concrete definition to cyberterrorism can be hard, due to the difficulty of defining the term terrorism itself. Multiple organizations have created their own definitions, most of which are overly{{quantify|date=July 2018}} broad. There is also controversy concerning overuse of the term, hyperbole in the media and by security vendors trying to sell "solutions".<ref>{{cite web|url= http://praguepost.com/opinion/5996-virtual-hostage.html|title= Virtual Hostage: Cyber terrorism and politically motivated computer crime|last= Anderson|first= Kent|date= 13 October 2010|publisher= The Prague Post|access-date= 14 October 2010}}</ref>

One way of understanding cyberterrorism involves the idea that terrorists could cause massive loss of life, worldwide economic chaos and environmental damage by hacking into critical infrastructure systems.<ref>{{Cite book|title=Cyberterrorism: Understanding, Assessment, and Response|first1=Keiran|last1=Hardy|first2=George|last2=Williams|editor-first1=Thomas M.|editor-last1=Chen|editor-first2=Lee|editor-last2=Jarvis|editor-first3=Stuart|editor-last3=Macdonald|date=11 August 2014|publisher=Springer|pages=1–23|doi=10.1007/978-1-4939-0962-9_1}}</ref> The nature of cyberterrorism covers conduct involving computer or Internet technology that:<ref name="ReferenceA" />
# is motivated by a political, religious or ideological cause
# is intended to intimidate a government or a section of the public to varying degrees
# seriously interferes with infrastructure

The term "cyberterrorism" can be used in a variety of different ways, but there are limits to its use. An attack on an Internet business can be labeled{{by whom|date=July 2018}} cyberterrorism, however when it is done for economic motivations rather than ideological it is typically regarded as [[Cybercrime|cybercrime]].<ref name="ReferenceA" /> Convention also limits the label "cyberterrorism" to actions by individuals, independent groups, or organizations. Any form of [[Cyberwarfare|cyberwarfare]] conducted by governments and states would be regulated and punishable under international law.<ref name="ReferenceA">Gable, Kelly A. "Cyber-Apocalypse Now: Securing the Internet against Cyberterrorism and Using Universal Jurisdiction as a Deterrent". ''Vanderbilt Journal of Transnational Law'', Vol. 43, No. 1</ref>

The Technolytics Institute defines cyberterrorism as <blockquote>[t]he premeditated use of disruptive activities, or the threat thereof, against computers and/or networks, with the intention to cause harm or further social, ideological, religious, political or similar objectives. Or to intimidate any person in furtherance of such objectives.<ref name="autogenerated1">{{Cite journal|last= INTELLIGENCE|first= ARMY TRAINING AND DOCTRINE COMMAND FORTLEAVENWORTH KS DEPUTY CHIEF OF STAFF FOR|date= 2005-08-15|title= Cyber Operations and Cyber Terrorism, Handbook Number 1.02|url= http://oai.dtic.mil/oai/oai?&verb=getRecord&metadataPrefix=html&identifier=ADA439217|language= en|access-date= 2010-05-04|archive-url= https://web.archive.org/web/20110823130310/http://oai.dtic.mil/oai/oai?&verb=getRecord&metadataPrefix=html&identifier=ADA439217|archive-date= 2011-08-23|url-status= dead}}</ref></blockquote> The term appears first in defense literature, surfacing (as "cyber-terrorism") in reports by the U.S. Army War College as early as 1998.<ref>{{cite book|last1= White|first1= Kenneth C.|title= Cyber-terrorism: Modern mayhem|date= 1998|publisher= U.S. Army War College|url= https://www.amazon.com/Cyber-terrorism-Modern-strategy-research-project/dp/B0006QY6BM |access-date= 13 March 2015}}</ref>

The National Conference of State Legislatures, an organization of legislators created to help policymakers in the {{wipe|United States}} with issues such as economy and homeland security defines cyberterrorism as:
<blockquote>
[T]he use of information technology by terrorist groups and individuals to further their agenda. This can include use of information technology to organize and execute attacks against networks, computer systems and telecommunications infrastructures, or for exchanging information or making threats electronically. Examples are hacking into computer systems, introducing viruses to vulnerable networks, web site defacing, [[Denial-of-service attack]]s, or terroristic threats made via electronic communication.<ref>[https://web.archive.org/web/20030110120948/http://www.ncsl.org/programs/lis/CIP/cyberterrorism.htm Cyberterrorism] National Conference of State Legislatures.</ref>
</blockquote>

NATO defines cyberterrorism as "[a] cyberattack using or exploiting computer or communication networks to cause sufficient destruction or disruption to generate fear or to intimidate a society into an ideological goal".<ref>
{{cite book
 | editor1-last = Centre of Excellence Defence Against Terrorism
 | title = Responses to Cyber Terrorism
 | url = https://books.google.com/books?id=tFmxVnDhBRQC
 | series = NATO science for peace and security series. Sub-series E: Human and societal dynamics, ISSN 1874-6276
 | volume = 34
 | location = Amsterdam
 | publisher = IOS Press
 | date = 2008
 | page = 119
 | isbn = 9781586038366
 | access-date = 22 July 2018
| quote = The current NATO Definition of cyber terrorism is: 'A cyberattack using or exploiting computer or communication networks to cause sufficient destruction or disruption to generate fear or to intimidate a society into an ideological goal.'
}}
</ref>

The United States National Infrastructure Protection Center defined cyberterrorism as: <blockquote>A criminal act perpetrated by the use of computers and telecommunications capabilities resulting in violence, destruction, and/or disruption of services to create fear by causing confusion and uncertainty within a given population, with the goal of influencing a government or population to conform to a political, social, or ideological agenda.<ref>
{{cite book
 | editor1-last = Centre of Excellence Defence Against Terrorism
 | title = Responses to Cyber Terrorism
 | url = https://books.google.com/books?id=tFmxVnDhBRQC
 | series = NATO science for peace and security series. Sub-series E: Human and societal dynamics, ISSN 1874-6276
 | volume = 34
 | location = Amsterdam
 | publisher = IOS Press
 | date = 2008
 | page = 119
 | isbn = 9781586038366
 | access-date = 2018-07-22
 | quote = The National Infrastructure Protection Center, now part of the US Department of Homeland Security, states as their understanding of cyber terrorism: 'A criminal act perpetrated by the use of computers and telecommunications capabilities resulting in violence, destruction, and/or disruption of services to create fear by causing confusion and uncertainty within a given population, with the goal of influencing a government or population to conform to a political, social, or ideological agenda.'
}}
</ref>
</blockquote>

The FBI, another United States agency, defines "cyber terrorism" as "premeditated, politically motivated attack against information, computer systems, computer programs, and data which results in violence against non-combatant targets by subnational groups or clandestine agents".<ref>
{{cite book
 | editor1-last = Centre of Excellence Defence Against Terrorism
 | title = Responses to Cyber Terrorism
 | url = https://books.google.com/books?id=tFmxVnDhBRQC
 | series = NATO science for peace and security series. Sub-series E: Human and societal dynamics, ISSN 1874-6276
 | volume = 34
 | location = Amsterdam
 | publisher = IOS Press
 | date = 2008
 | page = 119
 | isbn = 9781586038366
 | access-date = 22 July 2018
| quote = The Federal Bureau of Investigations{{sic}} has the following definition of cyber terrorism: Any 'premeditated, politically motivated attack against information, computer systems, computer programs, and data which results in violence against non-combatant targets by subnational groups or clandestine agents.'
}}
</ref>

These definitions tend to share the view of cyberterrorism as politically and/or ideologically inclined.  One area of debate is the difference between cyberterrorism and [[Hacktivism|hacktivism]]. Hacktivism is "the marriage of hacking with political activism".<ref>{{Cite journal|last= Conway|first= Maura|date= 2008|title= What is Cyberterrorism and How Real is the Threat?|journal= Cyber Behavior|pages= 217–245}}</ref> Both actions are politically driven and involve using computers, however cyberterrorism is primarily used to cause harm. It becomes an issue because acts of violence on the computer can be labeled{{by whom|date=July 2018}} either{{citation needed|date=July 2018}} cyberterrorism or hacktivism.

===Types of cyberterror capability===
In 1999 the Center for the Study of Terrorism and Irregular Warfare at the [[Organization:Naval Postgraduate School|Naval Postgraduate School]] in Monterey, California, defined three levels of cyberterror capability:<ref name="cs.georgetown.edu">
{{cite web
 | url= http://www.cs.georgetown.edu/~denning/infosec/cyberterror.html
 | title= Cyberterrorism | work= cs.georgetown.edu | date= 23 May 2000
| access-date= 19 June 2016 | author= Dorothy E. Denning
 | archive-url= https://web.archive.org/web/20140310162011/http://www.cs.georgetown.edu/~denning/infosec/cyberterror.html
 | archive-date= 10 March 2014 | url-status= dead
}}
</ref>

* Simple-Unstructured: the capability to conduct basic hacks against individual systems using tools created by someone else. The organization possesses little target-analysis, command-and-control, or learning capability.
* Advanced-Structured: the capability to conduct more sophisticated attacks against multiple systems or networks and possibly, to modify or create basic hacking-tools. The organization possesses an elementary target-analysis, command-and-control, and learning capability.
* Complex-Coordinated: the capability for a coordinated attack capable of causing mass-disruption against integrated, heterogeneous defenses (including cryptography). Ability to create sophisticated hacking tools. Highly capable target-analysis, command-and-control, and organization learning-capability.

===Concerns===
Cyberterrorism is becoming more and more prominent on [[Social:Social media|social media]] today.<ref>{{Cite journal|last= Warf | first=Barney|date=August 2016|title=Relational Geographies of Cyberterrorism and Cyberwar.|doi=10.1080/13562576.2015.1112113|journal=Space & Polity|volume= 20|issue=2|pages=143–157|s2cid=146837558}}</ref>{{qn|date=November 2021}} As the Internet becomes more pervasive, individuals or groups can use the anonymity afforded by [[Cyberspace|cyberspace]] to threaten other individuals, specific groups (with membership based, for example, on ethnicity or belief), communities and entire countries, without the inherent threat of identification, capture, injury, or death of the attacker that being physically present would bring.
Many groups such as [[Organization:Anonymous (group)|Anonymous]], use tools such as [[Denial-of-service attack|denial-of-service attack]]s to attack and censor groups which oppose them, creating many concerns for freedom and respect for differences of thought.

Many believe that cyberterrorism is an extreme threat to countries' economies,{{citation needed|date=November 2021}} and fear an attack could potentially lead to another Great Depression.{{citation needed|date=November 2021}} Several leaders agree that cyberterrorism has the highest percentage of threat over other possible attacks on U.S. territory. Although natural disasters are considered{{by whom|date=November 2021}} a top threat and have proven to be devastating to people and land, there is ultimately little that can be done to prevent such events from happening. Thus, the expectation is to focus more on preventative measures that will make Internet attacks impossible for execution.{{citation needed|date=November 2021}}

As the Internet continues to expand, and computer systems continue to be assigned increased responsibility while becoming more complex and interdependent, sabotage or terrorism via the Internet may become a more serious threat and is possibly one of the top 10 events to "end the human race."<ref>{{cite news | url = http://ca.news.yahoo.com/s/yahoocanada/101027/canada/top10_events_that_may_end_the_human_race | title = Top 10 events that may end the human race | access-date = 1 November 2010 | date = 27 October 2010 | work = Yahoo News | url-status = dead | archive-url = https://web.archive.org/web/20101030224924/http://ca.news.yahoo.com/s/yahoocanada/101027/canada/top10_events_that_may_end_the_human_race | archive-date = 30 October 2010 }}</ref>{{better source needed | reason = Unsourced clickbait alarmism|date=November 2021}} People have much easier access to illegal involvement within cyberspace by the ability to access a part of the internet known as the [[Dark web|Dark Web]].<ref>{{Cite journal |last= Vilić|first=Vida|date=December 2017|title=Dark Web, Cyber Terrorism and Cyber Warfare: Dark Side of the Cyberspace.|url= http://search.ebscohost.com/login.aspx?direct=true&db=aph&AN=127927428&site=ehost-live&scope=site|journal=Balkan Social Science Review|volume= 10|pages=7–24|via=EBSCOhost}}</ref>{{registration required}} The [[Internet of things|Internet of Things]] promises to further merge the virtual and physical worlds, which some{{quantify|date=November 2021}} experts{{which|date=November 2021}} see as a powerful incentive for states to use terrorist proxies in furtherance of objectives.<ref>Compare: {{cite news|last1= Costigan|first1= Sean|title= Cyber terrorism must be jointly tackled|url= http://www.sunday-guardian.com/extra/cyber-terrorism-must-be-jointly-tackled|access-date=12 March 2015|newspaper=Sunday Guardian|date=25 January 2015 | quote = States are actively engaged in weaponising code and are all too willing to hide behind the challenges of attribution — many will be apt to share code with proxies in furtherance of their objectives, just as states continue to support terrorism in the 'physical' realm. [...] Reduced technical complexity, lowered costs and most importantly, the continued push to connect the virtual and the physical — think of the growth of the Internet of Things or Machine-to-Machine connectivity — is making for new, enticing physical targets worldwide.}}</ref>

Dependence on the Internet is rapidly increasing on a worldwide scale, creating a platform for international cyber-terror plots to be formulated and executed as a direct threat to national security.<ref name="ReferenceA"/>{{qn|date=November 2021}} For terrorists, cyber-based attacks have distinct advantages over physical attacks. They can be conducted remotely, anonymously, and relatively cheaply, and they do not require significant investment in weapons, explosives or personnel.<ref>{{Cite journal|last= Sultan|first= Oz |date= 2019|title=Tackling Disinformation, Online Terrorism, and Cyber Risks into the 2020s|url= https://www.jstor.org/stable/26623066|journal=The Cyber Defense Review|volume=4|issue=1|pages=43–60| jstor= 26623066|issn=2474-2120}}</ref> The effects can be widespread and profound. Incidents of cyberterrorism are likely to increase. They can be expected to take place through denial-of-service attacks, malware, and other methods that are difficult to envision today.<ref>Joel Brenner and Jon R. Lindsay, "Debating the Chinese Cyber Threat", ''International Security'', Vol. 40, No. 1, Summer 2015, pp. 191–195.</ref>{{qn|date=November 2021}} One example involves the deaths involving the Islamic State and the online social networks Twitter, Google, and Facebook – leading to legal action being taken against them, that ultimately resulted in them being sued.<ref>{{Cite journal|last= Softness|first= Nicole|date=Winter 2016|title= Terrorist Communications: Are Facebook, Twitter, and Google Responsible for the Islamic State's Actions?|url= http://search.ebscohost.com/login.aspx?direct=true&db=aph&AN=120438209&site=ehost-live&scope=site|journal= Journal of International Affairs |volume= 70|pages= 201–215|via= EBSCOhost}}</ref>{{qn|date=November 2021}}

In an article about cyber attacks by Iran and North Korea, ''{{wipe|The New York Times}}'' observes:<blockquote>
 The appeal of digital weapons is similar to that of nuclear capability: it is a way for an outgunned, outfinanced nation to even the playing field. "These countries are pursuing cyberweapons the same way they are pursuing nuclear weapons," said James A. Lewis, a computer security expert at the Center for Strategic and International Studies in Washington. "It's primitive; it's not top of the line, but it's good enough and they are committed to getting it."<ref name="The New York Times">
{{cite news
 | url= https://www.nytimes.com/2013/03/29/technology/corporate-cyberattackers-possibly-state-backed-now-seek-to-destroy-data.html?pagewanted=2&_r=2&hp&pagewanted=all&
 | work= The New York Times | first1= Nicole | last1= Perlroth
 | first2= David E. | last2= Sanger
 | title= Corporate Cyberattacks, Possibly State-Backed, Now Seek to Destroy Data
 | date= 28 March 2013
}}
</ref>
</blockquote>In addition, Cyberterrorism has also been documented to arouse negative emotions. Recent studies have suggested that Cyberterrorism produces heightened levels of anger and stress, which do not differ drastically from the effects of conventional terrorism.<ref name=":2">{{Cite web |title=Cyberpsychology, Behavior, and Social Networking : |url=https://www.liebertpub.com/loi/cyber |access-date=2023-09-21 |website=Cyberpsychology, Behavior, and Social Networking |language=en}}</ref> Researchers also noted that Cyberterrorism produced higher levels of stress than anger, and the responses are not dependent on the lethality of the attack.<ref name=":2" />

===History===
Public interest in cyberterrorism began in the late 1990s, when the term was coined by Barry C. Collin.<ref>[http://leb.fbi.gov/2011/november/cyber-terror], William L. Tafoya, Ph.D., "Cyber Terror", FBI Law Enforcement Bulletin (FBI.gov), November 2011</ref> As 2000 approached, the fear and uncertainty about the [[Year 2000 problem|millennium bug]] heightened, as did the potential for attacks by cyber terrorists. Although the millennium bug was by no means a terrorist attack or plot against the world or the United States, it did act as a catalyst in sparking the fears of a possibly large-scale devastating cyber-attack. Commentators noted that many of the facts of such incidents seemed to change, often with exaggerated media reports.

The high-profile terrorist attacks in the United States on 11 September 2001, and the ensuing War on Terror by the US led to further media coverage of the potential threats of cyberterrorism in the years following. Mainstream media coverage often discusses the possibility of a large attack making use of computer networks to sabotage critical infrastructures with the aim of putting human lives in jeopardy or causing disruption on a national scale either directly or by disruption of the national economy.<ref>"White House shifts Y2K focus to states, CNN (February 23, 1999)". CNN. 23 February 1999. Retrieved 25 September 2011.
</ref>

Authors such as Winn Schwartau and John Arquilla are reported to have had considerable financial success selling books which described what were purported to be plausible scenarios of mayhem caused by cyberterrorism. Many critics claim that these books were unrealistic in their assessments of whether the attacks described (such as nuclear meltdowns and chemical plant explosions) were possible. A common thread throughout what critics perceive as cyberterror-hype is that of non-[[Philosophy:Falsifiability|falsifiability]]; that is, when the predicted disasters fail to occur, it only goes to show how lucky we've been so far, rather than impugning the theory.

In 2016, for the first time ever, the Department of Justice charged Ardit Ferizi with cyberterrorism. He is accused of allegedly hacking into a military website and stealing the names, addresses, and other personal information of government and military personnel and selling it to ISIS.<ref name="Blake">{{Cite news |last=Blake |first=Andrew |title=Ardit Ferizi, hacker who aided Islamic State, sentenced for helping terror group with 'kill list'. |work=The Washington Times |url=http://www.washingtontimes.com/news/2016/sep/24/ardit-ferizi-hacker-who-aided-islamic-state-senten |access-date=1 March 2017|language=en-US}}</ref>

On the other hand, it is also argued that, despite substantial studies on cyberterrorism, the body of literature is still unable to present a realistic estimate of the actual threat.<ref name=":1">{{Cite book|title=Law, Policy, and Technology: Cyberterrorism, Information Warfare, and Internet Immobilization: Cyberterrorism, Information Warfare, and Internet Immobilization|last=C|first=Reich, Pauline|publisher=Information Science Reference|year=2012|isbn=9781615208319|location=Hershey, PA|pages=354}}</ref> For instance, in the case of a cyberterrorist attack on a public infrastructure such as a power plant or air traffic control through hacking, there is uncertainty as to its success because data concerning such phenomena are limited.<ref name=":1" />

=== Current threats ===
Cyberterrorism ranks among the highest potential security threats in the world. It has become more critical than the development of nuclear weapons or the current conflicts between nations. Due to the pervasiveness of the internet and the amount of responsibility assigned to this technology, digital weapons pose a threat to entire economic or social systems. Some of the most critical international security concerns include:

DDoS Attacks – Millions of Denial of Service attacks occur every year and the service disruption can cost hundreds of thousands of dollars each hour they are down. It is important to keep critical systems secured and redundant to remain online during these attacks.

Social Engineering – In 1997 an experiment conducted by the NSA concluded that thirty five-hackers were able to access critical pentagon computer systems and could easily edit accounts, reformat data and even shut down entire systems. Often they used phishing tactics such as calling offices and pretending to be technicians to gain passwords.

Third Party Software – The top retailers are connected with thousands of separate third-party recourses and at least 23% of those assets have at least one critical vulnerability. These companies need to manage and reevaluate their network security in order to keep personal data safe.

=== Future threats ===
As technology becomes more and more integrated into society, new vulnerabilities and security threats are opened up on these complex networks that we have set up. If an intruder was to gain access to these networks they have the potential to threaten entire communities or economic systems. There is no certainty for what events will take place in the future, which is why it is important that there are systems build to adapt to the changing environment.

The most apparent cyberterrorism threat in our near future will involve the state of remote work during the COVID-19 pandemic. Companies cannot expect that every home office is up to date and secure so they must adopt a zero-trust policy from home devices. This means that they must assume corporate resources and unsecured devices are sharing the same space and they must act accordingly.

The rise of cryptocurrency has also sparked some additional threats in the realm of security. Cyber Criminals are now hijacking home computers and company networks in order to mine certain cryptocurrencies such as bitcoin. This mining process requires an immense amount of computer processing power which can cripple a business’ network and lead to severe downtime if the issue is not resolved.

==International attacks and response==

===Conventions===

As of 2016 there have been eighteen conventions and major legal instruments that specifically deal with terrorist activities and cyber terrorism.

* 1963: Convention on Offences and Certain Other Acts Committed on Board Aircraft
* 1970: Convention for the Suppression of Unlawful Seizure of Aircraft
* 1971: Convention for the Suppression of Unlawful Acts Against the Safety of Civil Aviation
* 1973: Convention on the Prevention and Punishment of Crimes against Internationally Protected Persons
* 1979: International Convention against the Taking of Hostages
* 1980: Convention on the Physical Protection of Nuclear Material
* 1988: Protocol for the Suppression of Unlawful Acts of Violence at Airports Serving International Civil Aviation
* 1988: Protocol for the Suppression of Unlawful Acts against the Safety of Fixed Platforms Located on the Continental Shelf
* 1988: Convention for the Suppression of Unlawful Acts against the Safety of Maritime Navigation
* 1989: Supplementary to the Convention for the Suppression of Unlawful Acts against the Safety of Civil Aviation
* 1991: Convention on the Marking of Plastic Explosives for the Purpose of Detection
* 1997: International Convention for the Suppression of Terrorist Bombings
* 1999: International Convention for the Suppression of the Financing of Terrorism
* 2005: Protocol to the Convention for the Suppression of Unlawful Acts against the Safety of Maritime Navigation
* 2005: International Convention for the Suppression of Acts of Nuclear Terrorism
* 2010: Protocol Supplementary to the Convention for the Suppression of Unlawful Seizure of Aircraft
* 2010: Convention on the Suppression of Unlawful Acts Relating to International Civil Aviation
*2014: Protocol to Amend the Convention on Offences and Certain Acts Committed on Board Aircraft<ref>{{Cite web|title=International Legal Instruments {{!}} Office of Counter-Terrorism|url=https://www.un.org/counterterrorism/international-legal-instruments|access-date=7 December 2021|website=www.un.org}}</ref>

=== Motivations for cyberattacks ===

There are many different motives for cyberattacks, with the majority being for financial reasons. However, there is increasing evidence that hackers are becoming more politically motivated. Cyberterrorists are aware that governments are reliant on the internet and have exploited this as a result. For example, Mohammad Bin Ahmad As-Sālim's piece "39 Ways to Serve and Participate in Jihad" discusses how an electronic jihad could disrupt the West through targeted hacks of American websites, and other resources seen as anti-Jihad, modernist, or secular in orientation (Denning, 2010; Leyden, 2007).<ref>{{cite journal|title=Exploring the Subculture of Ideologically Motivated Cyber-Attackers|first1=Thomas J.|last1=Holt|first2=Joshua D.|last2=Freilich|first3=Steven M.|last3=Chermak|journal=Journal of Contemporary Criminal Justice|volume=33|issue=3|pages=212–233|doi=10.1177/1043986217699100|year = 2017|s2cid=152277480}}</ref>

Many of the cyberattacks are not conducted for money, rather the cyberattacks are conducted due to different ideological beliefs and due to wanting to get personal revenge and outrage towards company or individual, the cybercriminal is attacking.<ref>{{Cite web|date=31 March 2016|title=Know Your Enemy: Understanding the Motivation Behind Cyberattacks|url=https://securityintelligence.com/know-your-enemy-understanding-the-motivation-behind-cyberattacks/|access-date=26 October 2021|website=Security Intelligence|language=en-US}}</ref> An employee might want to get revenge on a company if they were mistreated or wrongfully terminated.{{Citation needed|date=March 2022}}

Other motivations for cybercriminals include:

* Political goals 
* Competition between companies 
* Cyberwarfare between two countries
* Money 
Political goals motivate cyber-attackers because they are not happy with candidates and they might want certain candidates to win the election, therefore, they might alter the election voting to help their preferred candidate win.

Competition between two companies can also stir up a cyberattack, as one company can hire a hacker to conduct the attack on a company as they might want to test the rival company's security. This will also benefit a company because it will force their competitor's customers to think that the company is not secure due to them getting cyber attacked effortlessly and they don't want any of their personal credentials getting leaked.

Cyberwarfare is motivation for countries that are fighting each other. This is mainly used to weaken the opposing country by compromising its core systems and the countries data and other vulnerable information.

Money is motivating for cyber attacks for ransomware, phishing, and data theft as the cyber criminals can differently contact the victims and ask for money and in return the data stays safe.<ref>{{Cite web|date=24 March 2021|title=What Motivates Cyber Criminals? - SEGMENTECH|url=https://www.segmentech.com/what-motivates-cyber-criminals/|access-date=27 October 2021|website=SEGMENTECH Cyber-Security Solutions|language=en-US}}</ref>

=== International Institutions ===

The United Nations has several agencies that seek to address in cyberterrorism, including, the United Nations Office of Counter-Terrorism, [[Organization:United Nations Office on Drugs and Crime|the United Nations Office on Drugs and Crime]], the United Nations Office for Disarmament Affairs, the United Nations Institute for Disarmament Research, the United Nations Interregional Crime and Justice Research Institute, and the [[Organization:International Telecommunication Union|International Telecommunication Union]]. Both EUROPOL and INTERPOL also notably specialize on the subject.

Both Europol and Interpol specialize in operations against cyberterrorism as they both collaborate on different operations together and host a yearly joint cybercrime conference. While they both fight against cybercrime, both institutions operate differently. Europol sets up and coordinates cross-border operations against cybercriminals in the EU, while Interpol helps law enforcement and coordinates operations against cyber criminals globally.<ref>{{Cite web|title=Europol… INTERPOL… what's the difference?|url=https://www.europol.europa.eu/faq/europol%E2%80%A6-interpol%E2%80%A6-what%E2%80%99s-difference|access-date=6 December 2021|website=Europol|language=en}}</ref>

===Estonia and NATO===
{{Main|2007 cyberattacks on Estonia}}

The Baltic state of Estonia was the target of a massive denial-of-service attack that ultimately rendered the country offline and shut out from services dependent on Internet connectivity in April 2007. The infrastructure of Estonia including everything from online banking and mobile phone networks to government services and access to health care information was disabled for a time. The tech-dependent state experienced severe turmoil and there was a great deal of concern over the nature and intent of the attack.

The cyber attack was a result of an Estonian-Russian dispute over the removal of a bronze statue depicting a World War II-era Soviet soldier from the center of the capital, Tallinn.<ref name="Cyberterrorism"/> In the midst of the armed conflict with Russia, Georgia likewise was subject to sustained and coordinated attacks on its electronic infrastructure in August 2008. In both of these cases, circumstantial evidence point to coordinated Russian attacks, but attribution of the attacks is difficult; though both the countries blame Moscow for contributing to the cyber attacks, proof establishing legal culpability is lacking.

Estonia joined NATO in 2004, which prompted NATO to carefully monitor its member states' response to the attack. NATO also feared escalation and the possibility of cascading effects beyond Estonia's border to other NATO members. In 2008, directly as a result of the attacks, NATO opened a new center of excellence on cyberdefense to conduct research and training on cyber warfare in Tallinn.<ref>Maryann Cusimano Love. (2011). ''Beyond Sovereignty: Issues for a Global Agenda''. Wadsworth, Cengage Learning.</ref>

The chaos resulting from the attacks in Estonia illustrated to the world the dependence countries had on information technology. This dependence then makes countries vulnerable to future cyber attacks and terrorism.<ref name="Cyberterrorism"/>

Quick information on the cyber attack on Estonia and its effects on the country.<ref>{{Cite news|date=27 April 2017|title=How a cyber attack transformed Estonia|language=en-GB|work=BBC News|url=https://www.bbc.com/news/39655415|access-date=6 December 2021}}</ref>

* Online services of Estoninan banks and government services were taken down by uncontrollable high level of internet traffic
* Media outlets were also down and so broadcasters could not deliver the news of the cyber attacks
* Some of the services were under attack for 22 days, while other online services were taken down completely
* Riots and Looting went on for 48 hours in Tallinn, Estonia
* The cyber attack served as a wake up call to Estonia and for the entire world on the importance of cyber defence.

As cyberattacks continue to increase around the world, countries still look at the attacks on Estonia in the 2007 as an example of how countries can fight future cyberattacks and terrorism. As a result of the attacks, Estonia is now currently one of the top countries in cyber defence and online safety and its capital city of Tallinn is home to NATO's cyber defense hub. The government of Estonia continues to update there cyber defence protocols and national cybersecurity strategies. NATO's Coopeative Cyber Defence Centre in Tallinn also conducts research and training on cyber security to not just help Estonia but other countries that are in the alliance.<ref>{{Cite web|author=Ivana Kottasová|title=How Russian threats turned this country into the go-to expert on cyber defense|url=https://www.cnn.com/2021/06/18/tech/estonia-cyber-security-lessons-intl-cmd/index.html|access-date=6 December 2021|website=CNN}}</ref>

===China===

The Chinese Defense Ministry confirmed the existence of an online defense unit in May 2011. Composed of about thirty elite internet specialists, the so-called "Cyber Blue Team", or "Blue Army", is officially claimed to be engaged in cyber-defense operations, though there are fears the unit has been used to penetrate secure online systems of foreign governments.<ref>{{cite news|last=Yu|first=Eileen|title=China dispatches online army|url=http://www.zdnetasia.com/china-dispatches-online-army-62300502.htm|access-date=3 June 2011|newspaper=[[ZDNet|ZDNet Asia]]|date=27 May 2011|quote=Geng Yansheng, spokesperson for China's Defense Ministry, was quoted to say that the PLA set up the cyberwar unit, or 'cyber blue team', to support its military training and upgrade the army's Internet security defense.}}</ref><ref>{{cite news|title=China Confirms Existence of Elite Cyber-Warfare Outfit the 'Blue Army'|url=http://www.foxnews.com/scitech/2011/05/26/china-confirms-existence-blue-army-elite-cyber-warfare-outfit/|access-date=3 June 2011|newspaper=Fox News|date=26 May 2011|quote=China set up a specialized online 'Blue Army' unit that it claims will protect the People's Liberation Army from outside attacks, prompting fears that the crack team was being used to infiltrate foreign governments' systems.}}</ref> China's leaders have invested in its foundations of cyber defense and quantum computing and artificial intelligence. 39 Chinese soldiers were chosen  to strengthen China's cyber defenses. The reason given by Spokesman for the Ministry of National Defense, Geng Yansheng was that their internet protection was currently weak. Geng claimed that the program was only temporary to help improve cyber defenses.<ref>{{Cite web|last=Austin|first=Greg|title=How Good Are China's Cyber Defenses?|url=https://thediplomat.com/2018/07/how-good-are-chinas-cyber-defenses/|access-date=30 November 2021|website=thediplomat.com|language=en-US}}</ref>

=== India ===

To counter the cyber terrorists, also called "white-collar jihadis", the police in {{wipe|India}} has registered private citizens as volunteers who patrol the internet and report the suspected cyber terrorists to the government. These volunteers are categorised in three categories, namely "Unlawful Content Flaggers", "Cyber Awareness Promoters" and "Cyber Experts". In August 2021, police arrested five suspected white-collar jihadis who were preparing a hit list of officers, journalists, social activists, lawyers and political functionaries to create fear among people. The white-collar jihadis are considered "worst kind of terrorists" as they remain anonymous and safe in other nations, but inflict "immeasurable" amount of damage and brainwashing.<ref name=wcj1>[https://www.tribuneindia.com/news/j-k/jammu-and-kashmir-police-cracking-down-on-white-collar-jihadis-303976 Jammu and Kashmir Police cracking down on ‘white-collar jihadis’], The Tribune, 30 August 2021.</ref>

In India, the demand for cyber security professionals has increased over 100 per cent in 2021 and will rise 200 per cent by 2024.<ref>{{Cite web|last=Tejaswi|first=Mini|title=India will require 70K cyber experts this year alone: Xpheno|url=https://www.thehindubusinessline.com/info-tech/india-will-require-70k-cyber-experts-this-year-alone-xpheno/article34547344.ece|access-date=30 November 2021|website=@businessline|date=13 May 2021 |language=en}}</ref>

Eighty two percent of companies in India had a ransomware attack in the year 2020. The cost it takes to recover from a ransomware attack in India has gone from $1.1 million in 2020 to $3.38 million in 2021.<ref>{{Cite news|last=IANS|date=1 June 2021|title=At Rs 24.5 crore, ransomware data recovery cost triples in India|work=Business Standard India|url=https://www.business-standard.com/article/technology/at-rs-24-5-crore-ransomware-data-recovery-cost-triples-in-india-121060100574_1.html|access-date=30 November 2021}}</ref> India is at the top of the list of 30 countries for ransomware attacks.

A cyber-attack took place on the electricity grid in Maharashtra that resulted in a power outage. This occurred in October 2020 and the authorities believe China was behind it.<ref>{{Cite web|date=7 April 2021|title=Cyber Security for Critical Infrastructure: Challenges and Solutions|url=https://www.kratikal.com/blog/cyber-security-for-critical-infrastructure-challenges-and-solutions/|access-date=30 November 2021|website=Kratikal Blogs|language=en-US}}</ref>

Important information like dates of birth and full names were leaked for thousands of patients who were tested for COVID-19. This information was made accessible on Google and was leaked from government websites. The job portal IIMjobs was attacked and the information of 1.4 million people looking for jobs was leaked. The information leaked was quite extensive including the location of users and their names and phone numbers. The information for 500,000 Indian police personal was sold on a forum in February 2021. The information contained much personal information. The data was from a police exam taken in December 2019.<ref>{{Cite web|date=28 October 2021|title=The Current State of Cyber Security in India|url=https://www.kratikal.com/blog/the-current-state-of-cyber-security-in-india/|access-date=30 November 2021|website=Kratikal Blogs|language=en-US}}</ref>

===Korea===

According to 2016 Deloitte Asia-Pacific Defense Outlook,<ref>{{cite web|url=https://www2.deloitte.com/kr/ko/footerlinks/pressreleasespage/2016/press-release-20160224.html|title=한국, 아태지역 국가 중 사이버 테러 취약성 1위 – Deloitte Korea – Press Release|website=딜로이트}}</ref> South Korea's 'Cyber Risk Score' was 884 out of 1,000 and South Korea is found to be the most vulnerable country to cyber attacks in the Asia-Pacific region. Considering South Korea's high speed internet and cutting-edge technology, its cyber security infrastructure is relatively weak.<ref>{{Cite journal|last=Arashi|first=Rieko|date=2016|title=Deloitte Asia Pacific Defense Outlook 2016: Defense in Four Domains|url=https://www2.deloitte.com/content/dam/Deloitte/global/Documents/Public-Sector/gx-ps-ap-defense-outlook-2016-160216.pdf|journal=Deloitte Asia Pacific Defense Outlook|publisher=Deloitte Touche Tohmatsu Limited|pages=18–19}}</ref> The [[2013 South Korea cyberattack|2013 South Korea cyberattack]] significantly damaged the Korean economy.  This attack wounded the systems of two banks and the computer networks of three TV broadcasters. The incident was a massive blow, and the attacker was never identified. It was theorized to be North Korea. The week before North Korea accused the United States and South Korea of shutting down their internet for two days.<ref>{{Cite web|date=20 March 2013|title=South Korea on alert for cyber-attacks after major network goes down|url=http://www.theguardian.com/world/2013/mar/20/south-korea-under-cyber-attack|access-date=30 November 2021|website=the Guardian|language=en}}</ref> In 2017, a [[Ransomware|ransomware]] attack harassed private companies and users, who experienced personal information leakage. Additionally, there were North Korea's cyber attacks which risked national security of South Korea.<ref>A Study of countermeasure and strategy analysis on North Korean cyber terror, 신충근 and 이상진</ref>

In response to this, South Korean government's countermeasure is to protect the [[Information security|information security]] centres the National Intelligence Agency. Currently, 'cyber security' is one of the major goals of NIS Korea.<ref>{{Cite web | url=http://eng.nis.go.kr |title = National Intelligence Service}}</ref> Since 2013, South Korea had established policies related to National cyber security and trying to prevent cyber crises via sophisticated investigation on potential threats. Meanwhile, scholars emphasize on improving the national consciousness towards cyber attacks as South Korea had already entered the so-called 'hyper connected society'.

North Korea's cyberwarfare is incredibly efficient and the best of state-sponsored hackers. Those who are chosen to be hackers are selected when they are young and trained specifically in cyberwarfare. Hackers are trained to steal money from ATMs but not enough to be reported. North Korea is great at zero-day exploits. The country will hack anyone they chose to. They steal secrets from companies and government agencies and steal money from financial systems to fund their hacking operations.<ref>{{Cite web|title=StackPath|url=https://www.securityinfowatch.com/critical-infrastructure/article/21242385/the-insidious-north-korean-hacking-threat|access-date=30 November 2021|website=www.securityinfowatch.com}}</ref>

===Pakistan===

{{wipe|Pakistan}}i Government has also taken steps to curb the menace of cyberterrorism and extremist propaganda. [http://nacta.gov.pk National Counter Terrorism Authority (Nacta)] is working on joint programs with different NGOs and other cyber security organizations in Pakistan to combat this problem. Surf Safe Pakistan<ref>{{cite web |url=http://surfsafe.pk |title = Surfsafe® Pakistan {{!}} Report Extremist Online-Content}}</ref> is one such example. Now people in Pakistan can report extremist and terrorist related content online on Surf Safe Pakistan portal. The National Counter Terrorism Authority (NACTA) provides the Federal Government's leadership for the Surf Safe Campaign.

=== Ukraine ===

A series of [[2017 cyberattacks on Ukraine|powerful cyber attacks]] began 27 June 2017, that swamped websites of Ukrainian organizations, including banks, ministries, newspapers and electricity firms.

===USA ===

The US Department of Defense (DoD) charged the United States Strategic Command with the duty of combating cyberterrorism. This is accomplished through the Joint Task Force-Global Network Operations, which is the operational component supporting USSTRATCOM in defense of the DoD's [[Global Information Grid]]. This is done by integrating GNO capabilities into the operations of all DoD computers, networks, and systems used by DoD combatant commands, services and agencies.

On 2 November 2006, the Secretary of the Air Force announced the creation of the Air Force's newest MAJCOM, the [[Organization:Air Force Cyber Command (Provisional)|Air Force Cyber Command]], which would be tasked to monitor and defend American interest in cyberspace. The plan was however replaced by the creation of Twenty-Fourth Air Force which became active in August 2009 and would be a component of the planned United States Cyber Command.<ref>Bruce M. DeBlois, et al., "Space Weapons: Crossing the U.S. Rubicon," International Security, Vol. 29, No. 2, Fall 2004, pp. 50–84.</ref>

On 22 December 2009, the White House named its head of [[Computer security|computer security]] as Howard Schmidt to coordinate U.S Government, military and intelligence efforts to repel hackers. He left the position in May 2012.<ref>Chabrow, Eric. [http://www.govinfosecurity.com/obama-cybersecurity-coordinator-resigns-a-4778/op-1 Obama Cybersecurity Coordinator Resigns]. GovInfoSecurity.com, 17 May 2012. Accessed: 11 February 2014.</ref> Michael Daniel was appointed to the position of White House Coordinator of Cyber Security the same week<ref>[http://breakinggov.com/2012/05/17/white-house-names-new-cybersecurity-chief/ White House Names New Cybersecurity Chief]. BreakingGov.com 17 May 2012. Accessed: 11 February 2014.</ref> and continues in the position during the second term of the Obama administration.<ref>McDonald, Ryan.[http://www.bizjournals.com/baltimore/blog/cyberbizblog/2014/01/white-house-cyber-security-chief-warns.html White House Security Chief Warns]. Baltimore Biz Journal. 29 January 2014. Access date: 11 February 2014.</ref>

Obama signed an executive order to enable the US to impose sanctions on either individuals or entities that are suspected to be participating in cyber related acts. These acts were assessed to be possible threats to US national security, financial issues or foreign policy issues.<ref>{{Cite news|url=https://obamawhitehouse.archives.gov/the-press-office/2015/04/01/fact-sheet-executive-order-blocking-property-certain-persons-engaging-si|title=FACT SHEET: Executive Order Blocking the Property of Certain Persons Engaging in Significant Malicious Cyber-Enabled Activities|date=1 April 2015|work=whitehouse.gov|access-date=1 March 2017|language=en}}</ref> U.S. authorities indicted a man over 92 cyberterrorism hacks attacks on computers used by the Department of Defense.<ref>{{Cite web|title=Cybersecurity|last=Marshall|first=Patrick|url=http://library.cqpress.com/cqresearcher/document.php?id=cqresrre2010022600|website=CQ Researcher|date=26 September 2003|pages=797–820}}</ref> A Nebraska-based consortium apprehended four million hacking attempts in the course of eight weeks.<ref>{{Cite web|url=http://library.cqpress.com/cqresearcher/document.php?id=cqresrre2016111100|title=Protecting the power grid|last=Begos|first=Kevin|date=11 November 2016 |website=CQ Researcher}}</ref> In 2011 cyberterrorism attacks grew 20%.<ref>{{Cite web|url=http://library.cqpress.com/cqresearcher/document.php?id=cqresrre2013021500|title=Improving cybersecurity|last=Flamini|first=Roland|date=15 February 2013|website=CQ Researcher}}</ref>

In May 2021, President Joe Biden announced an executive order aiming to improve America's cybersecurity. It came about after an increase in cybersecurity attacks aimed at the country's public and private sector. The plan aims to improve the government's cyberdefense by working on its ability to identify, deter, protect against, detect, and respond to attacks. The plan has 10 sections written into the document that include, to name a few, improving sharing of threat information, modernizing the government's cybersecurity, and establishing a Cybersecurity Review Board.<ref>{{Cite web|date=12 May 2021|title=Executive Order on Improving the Nation's Cybersecurity|url=https://www.whitehouse.gov/briefing-room/presidential-actions/2021/05/12/executive-order-on-improving-the-nations-cybersecurity/|access-date=6 December 2021|website=The White House|language=en-US}}</ref>

==Examples==
An operation can be done by anyone anywhere in the world, for it can be performed thousands of miles away from a target. An attack can cause serious damage to a critical infrastructure which may result in casualties.<ref>{{cite journal|last=Ayers|first=Cynthia|title=The Worst is Yet To Come|journal=Futurist|date=September 2009|pages=49}}</ref>

Some attacks are conducted in furtherance of political and social objectives, as the following examples illustrate:

* In 1996, a computer hacker allegedly associated with the White Supremacist movement temporarily disabled a Massachusetts ISP and damaged part of the ISP's record keeping system. The ISP had attempted to stop the hacker from sending out worldwide racist messages under the ISP's name. The hacker signed off with the threat: "you have yet to see true electronic terrorism. This is a promise."
* In 1998, Spanish protesters bombarded the Institute for Global Communications (IGC) with thousands of bogus e-mail messages. E-mail was tied up and undeliverable to the ISP's users, and support lines were tied up with people who couldn't get their mail. The protestors also spammed IGC staff and member accounts, clogged their Web page with bogus credit card orders, and threatened to employ the same tactics against organizations using IGC services. They demanded that IGC stop hosting the Web site for the Euskal Herria Journal, a New York-based publication supporting Basque independence. Protestors said IGC supported terrorism because a section on the Web pages contained materials on the terrorist group ETA, which claimed responsibility for assassinations of Spanish political and security officials, and attacks on military installations. IGC finally relented and pulled the site because of the "mail bombings".
* In 1998, ethnic Tamil guerrillas attempted to disrupt Sri Lankan embassies by sending large volumes of e-mail. The embassies received 800 e-mails a day over a two-week period. The messages read "We are the Internet Black Tigers and we're doing this to disrupt your communications." Intelligence authorities characterized it as the first known attack by terrorists against a country's computer systems.<ref>{{cite journal|last1=Denning|first1=Dorothy|title=Cyberterrorism: The Logic Bomb versus the Truck Bomb|journal=Global Dialogue|date=Autumn 2000|volume=2|issue=4|url=http://www.worlddialogue.org/content.php?id=111|archive-url=https://web.archive.org/web/20130627073012/http://www.worlddialogue.org/content.php?id=111|url-status=dead|archive-date=27 June 2013|access-date=20 August 2014}}</ref>
* During the Kosovo conflict in 1999, NATO computers were blasted with e-mail bombs and hit with denial-of-service attacks by hacktivists protesting the NATO bombings. In addition, businesses, public organizations and academic institutes received highly politicized virus-laden e-mails from a range of Eastern European countries, according to reports. Web defacements were also common. After the Chinese Embassy was accidentally bombed in Belgrade{{Citation needed|date=September 2012}}, {{wipe|China}} hacktivists posted messages such as "We won't stop attacking until the war stops!" on U.S. government Web sites.
* Since December 1997, the Electronic Disturbance Theater (EDT) has been conducting Web sit-ins against various sites in support of the Mexican Zapatistas. At a designated time, thousands of protestors point their browsers to a target site using software that floods the target with rapid and repeated download requests. EDT's software has also been used by animal rights groups against organizations said to abuse animals. Electrohippies, another group of hacktivists, conducted Web sit-ins against the WTO when they met in Seattle in late 1999. These sit-ins all require mass participation to have much effect, and thus are more suited to use by activists than by terrorists.<ref name="cs.georgetown.edu"/>
* In 2000, a {{wipe|Japan}}ese investigation revealed that the government was using software developed by computer companies affiliated with [[Unsolved:Aum Shinrikyo|Aum Shinrikyo]], the doomsday sect responsible for the sarin gas attack on the Tokyo subway system in 1995. "The government found 100 types of software programs used by at least 10 Japanese government agencies, including the Defense Ministry, and more than 80 major Japanese companies, including Nippon Telegraph and Telephone."<ref>Maryann Cusimano Love, Public-Private Partnerships and Global Problems: Y2K and Cybercrime. Paper Presented at the International Studies Association, Hong Kong, July 2001.</ref> Following the discovery, the Japanese government suspended use of Aum-developed programs out of concern that Aum-related companies may have compromised security by breaching firewalls. gaining access to sensitive systems or information, allowing invasion by outsiders, planting viruses that could be set off later, or planting malicious code that could cripple computer systems and key data system.<ref>Calvin Sims, "Japan Software Suppliers Linked to Sect", The New York Times (2 March 2000): A6.</ref>
* In March 2013, ''The New York Times'' reported on a pattern of cyber attacks against U.S. financial institutions believed to be instigated by [[Religion:Iran|Iran]] as well as incidents affecting South Korean financial institutions that originate with the North Korean government.<ref name="The New York Times"/>
* In August 2013, media companies including ''The New York Times'', [[Company:Twitter|Twitter]] and the Huffington Post lost control of some of their websites after hackers supporting the [[Place:Syria|Syria]]n government breached the Australian Internet company that manages many major site addresses. The Syrian Electronic Army, a hacker group that has previously attacked media organisations that it considers hostile to the regime of Syrian president Bashar al-Assad, claimed credit for the Twitter and Huffington Post hacks in a series of Twitter messages. Electronic records showed that NYTimes.com, the only site with an hours-long outage, redirected visitors to a server controlled by the Syrian group before it went dark.<ref>{{cite web|url=http://www.thedailystar.net/beta2/news/new-york-times-twitter-hacked-by-syrian-group/|title=New York Times, Twitter hacked by Syrian group|date=28 August 2013}}</ref>
* Pakistani Cyber Army is the name taken by a group of hackers who are known for their defacement of websites, particularly {{wipe|India}}n, {{wipe|China}}, and [[Place:Israel|Israel]]i companies and governmental organizations, claiming to represent Pakistani nationalist and [[Religion:Islam|Islam]]ic interests.<ref>{{Cite web|url=http://cjlab.memri.org/lab-projects/monitoring-jihadi-and-hacktivist-activity/pakistan-cyber-army-pca-hacking-indian-websites-promoting-pakistani-interests-in-cyber-space-and-nurturing-pakistani-hackers/|title=Pakistan Cyber Army (PCA) – Hacking Indian Websites, Promoting Pakistani Interests In Cyber Space And Nurturing Pakistani Hackers {{!}} The Cyber & Jihad Lab|website=cjlab.memri.org|access-date=28 May 2016}}</ref> The group is thought to have been active since at least 2008,<ref>{{Cite web|url=https://www.threatconnect.com/debugging-pca-from-pakbugs-to-bitterbugs/|title=Debugging the Pakistan Cyber Army: From Pakbugs to Bitterbugs – ThreatConnect {{!}} Enterprise Threat Intelligence Platform|date=6 October 2014|website=ThreatConnect {{!}} Enterprise Threat Intelligence Platform|language=en-US|access-date=28 May 2016}}</ref> and maintains an active presence on social media, especially Facebook. Its members have claimed responsibility for the hijacking of websites belonging to [[Company:Acer Inc.|Acer]],<ref>{{Cite web|url=https://www.theregister.co.uk/2012/12/10/pakistan_cyber_army_hack_bangladesh_china/|title=Pakistan Cyber Army declares war on Chinese, Bangladeshi sites|last1=India|last2=Censorship|access-date=28 May 2016|last3=China|last4=Japan|last5=Apple|last6=Reg man says '拜拜' to Honkers|first6=ponders Asia's future role in tech world|last7=month|first7=Acer founder Shih to step down for second time next|last8=themselves|first8=Script fools n00b hackers into hacking|website=The Register}}</ref>  [[Company:Bharat Sanchar Nigam Limited|BSNL]],<ref>{{Cite web|url=http://www.medianama.com/2011/07/223-bsnl-website-hacked-by-pakistan-cyber-army-report/|title=BSNL Website Hacked By Pakistan Cyber Army: Report|last=Saxena|first=Anupam|date=28 July 2011|website=MediaNama|access-date=28 May 2016}}</ref> India's CBI, Central Bank, and the State Government of Kerala.<ref>{{Cite web|url=http://www.ndtv.com/india-news/hacked-by-pakistan-cyber-army-cbi-website-still-not-restored-441100|title=Hacked by 'Pakistan cyber army', CBI website still not restored|website=NDTV.com|access-date=28 May 2016}}</ref><ref>{{Cite web|url=http://www.bgr.in/news/indian-websites-are-more-vulnerable-to-cyber-attacks-from-pakistan-based-hackers-on-major-events/|title='Indian websites are more vulnerable to cyber attacks from Pakistan-based hackers on major events' {{!}} Latest Tech News, Video & Photo Reviews at BGR India|website=www.bgr.in|access-date=28 May 2016|date=12 February 2016}}</ref>
*British hacker Kane Gamble, sentenced to 2 years in youth detention, posed as CIA chief to access highly sensitive information.<ref>"[https://www.telegraph.co.uk/news/2018/01/19/british-15-year-old-gained-access-intelligence-operations-afghanistan/ British 15-year-old gained access to intelligence operations in Afghanistan and Iran by pretending to be head of CIA, court hears]". ''The Daily Telegraph.'' 19 January 2018.</ref> He also "cyber-terrorized" high-profile U.S. intelligence officials such as then CIA chief John Brennan or Director of National Intelligence James Clapper.<ref>"[https://www.independent.co.uk/news/uk/british-teen-hacker-kane-gamble-us-intelligence-officials-jailed-cia-fbi-a8315126.html British teenager who 'cyber-terrorised' US intelligence officials gets two years detention]". ''The Independent.'' 21 April 2018.</ref><ref>"[http://www.dw.com/en/british-teen-kane-gamble-accessed-accounts-of-top-us-intelligence-and-security-officials/a-42230614 British teen Kane Gamble accessed accounts of top US intelligence and security officials]". Deutsche Welle. 21 January 2018.</ref> The judge said Gamble engaged in "politically motivated cyber terrorism".<ref>[http://www.dw.com/en/uk-teen-kane-gamble-gets-two-years-for-hacking-cia-ex-chief-john-brennan/a-43477403 UK teen Kane Gamble gets two years for hacking CIA ex-chief John Brennan]". ''Deutsche Welle.'' 20 April 2018.</ref>
*In March 2021 hackers affiliated with Russia were reported to have targeted Lithuanian Officials and decision makers. The cyber-espionage group APT29 which is believed to have carried out the attacks utilized the country's own IT infrastructure against organizations involved in the development of a [[Medicine:COVID-19|COVID-19]] vaccine.<ref>{{Cite web|date=20 April 2021|title=Report: Russian hackers exploit Lithuanian infrastructure|url=https://apnews.com/article/lithuania-coronavirus-pandemic-covid-19-pandemic-national-security-russia-4f643495296f645e8957594034ec0367|access-date=26 October 2021|website=AP NEWS|language=en}}</ref>
*On 7 May 2021, the Colonial Pipeline was hit with a cyberattack that disrupted oil distribution. The Colonial Pipeline is a pipeline that controls almost half (45%) of the oil that runs through the East Coast of the United States. This attack caused the company to turn off the pipeline, which it had never done before. Thus, many people panicked buying gasoline at gas stations, and the government thought this attack would quickly spread.<ref>{{Cite news|last1=Sanger|first1=David E.|last2=Perlroth|first2=Nicole|date=14 May 2021|title=Pipeline Attack Yields Urgent Lessons About U.S. Cybersecurity|language=en-US|work=The New York Times|url=https://www.nytimes.com/2021/05/14/us/politics/pipeline-hack.html|access-date=30 November 2021|issn=0362-4331}}</ref> Ultimately, the Colonial Pipeline paid nearly an amount of 5 million dollars worth of cryptocurrency. Even though the Colonial paid all the money, the system did not turn on as rapidly as it used to.<ref>{{Cite news|last=Perlroth|first=Nicole|date=13 May 2021|title=Colonial Pipeline paid 75 Bitcoin, or roughly $5 million, to hackers.|language=en-US|work=The New York Times|url=https://www.nytimes.com/2021/05/13/technology/colonial-pipeline-ransom.html|access-date=30 November 2021|issn=0362-4331}}</ref> The hacker accused of this attack is a group called DarkSide. The money that the Colonial paid went to DarkSide, but there are other entities involved as well. For now, DarkSide has decided to discontinue its operations.<ref>{{Cite news|last1=Schwirtz|first1=Michael|last2=Perlroth|first2=Nicole|date=14 May 2021|title=DarkSide, Blamed for Gas Pipeline Attack, Says It Is Shutting Down|language=en-US|work=The New York Times|url=https://www.nytimes.com/2021/05/14/business/darkside-pipeline-hack.html|access-date=30 November 2021|issn=0362-4331}}</ref>
*On 30 May 2021, JBS was exposed to a cyberattack of ransomware which delayed the plant's meat production. JBS is the world's largest meat producer that provides meat-related products for people. This attack caused the shutdown of all nine beef factories in the United States and disrupted poultry and pork production. In addition, labor had to be cut due to the closings of the factories, and the cost of meat increased due to no meat being produced.<ref>{{Cite news|last1=Creswell|first1=Julie|last2=Perlroth|first2=Nicole|last3=Scheiber|first3=Noam|date=1 June 2021|title=Ransomware Disrupts Meat Plants in Latest Attack on Critical U.S. Business|language=en-US|work=The New York Times|url=https://www.nytimes.com/2021/06/01/business/meat-plant-cyberattack-jbs.html|access-date=30 November 2021|issn=0362-4331}}</ref> Ultimately, JBS had to pay 11 million dollars worth of cryptocurrency to regain control.<ref>{{Cite news|last=Robbins|first=Rebecca|date=10 June 2021|title=Meat processor JBS paid $11 million in ransom to hackers.|language=en-US|work=The New York Times|url=https://www.nytimes.com/2021/06/09/business/jbs-cyberattack-ransom.html|access-date=30 November 2021|issn=0362-4331}}</ref> A group called REvil was responsible for the attack. REvil is a group based in the country of Russia that is also one of the most productive ransomware organizations.<ref>{{Cite news|last1=Perlroth|first1=Nicole|last2=Scheiber|first2=Noam|last3=Creswell|first3=Julie|date=2 June 2021|title=Russian Cybercriminal Group Was Behind Meat Plant Attack, F.B.I. Says|language=en-US|work=The New York Times|url=https://www.nytimes.com/2021/06/02/business/jbs-beef-cyberattack.html|access-date=30 November 2021|issn=0362-4331}}</ref>
* In the summer of 2021, crimes committed in Cyprus,<ref>{{cite web |last1=Agapiou |first1=Gina |title=Limassol building evacuated after bomb threat {{!}} Cyprus Mail |url=https://cyprus-mail.com/2021/07/16/limassol-building-evacuated-after-bomb-threat/ |website=cyprus-mail.com/ |access-date=21 August 2021}}</ref><ref>{{cite web |title=Building in Limassol evacuated after warning about bomb |url=https://theworldnews.net/cy-news/building-in-limassol-evacuated-after-warning-about-bomb |website=Building in Limassol evacuated after warning about bomb |access-date=21 August 2021}}</ref> Israel<ref>{{cite web |title=The building with a planted bomb in Tel Aviv |url=https://jewishreview.co.il/the-building-with-a-planted-bomb-in-tel-aviv-15205/ |website=Jewish Review |date=18 July 2021}}</ref> and Lithuania<ref>{{cite web |title=После угрозы взрыва большого здания в Вильнюсе введен план "Щит" |url=https://www.delfi.lt/ru/news/crime/posle-ugrozy-vzryva-bolshogo-zdaniya-v-vilnyuse-vveden-plan-schit.d?id=88000391 |website=DELFI}}</ref> were classified by experts as Internet terrorism. Anonymous persons informed law enforcement authorities through the internet about mined business centers and office buildings. Main target was the gambling company Affise. According to Ambassador John R. Bolton,<ref>{{cite web |title=Israel has become a target of Internet terrorists again |url=https://security-affairs.com/2021/08/03/israel-has-become-a-target-of-internet-terrorists-again/ |website=The Journal of International Security Affairs |access-date=21 August 2021 |date=3 August 2021}}</ref> these occurrences are vivid examples of Internet terrorism. Amb. Bolton believes that they are consequences of financial conflict stirred among the owners of Affise, PlayCash and "CyberEye-25" group. According to the expert, all three companies gain illicit income associated with criminal activities on the Internet.
*In early December 2021 it was reported least nine U.S State Department had their phones hacked by an unknown attacker. All nine employees had Apple Iphones. The hack, which took place over several months, was done through the use of iMessages that had a software attached that when sent, without needing to be interacted with, installed spyware known as Pegasus. The software used was developed and sold by an Israel-based spyware development company named [[Company:NSO Group|NSO Group]].<ref>{{Cite news|last1=Bing|first1=Christopher|last2=Menn|first2=Joseph|date=4 December 2021|title=U.S. State Department phones hacked with Israeli company spyware - sources|language=en|work=Reuters|url=https://www.reuters.com/technology/exclusive-us-state-department-phones-hacked-with-israeli-company-spyware-sources-2021-12-03/|access-date=5 December 2021}}</ref>
*In December 2021 at least five US defense and tech firms have been hacked by a group operating from China. The group took advantage of an exploit used in these organization's software to conduct their campaign which came to light in upcoming months. The target of these breaches were passwords as well as having the goal of intercepting private communications. As of right now the extent of the damage is unclear as the breaches are ongoing.<ref>{{Cite web|author=Sean Lyngaas|title=Suspected Chinese hackers breach more US defense and tech firms|url=https://www.cnn.com/2021/12/02/politics/china-hackers-espionage-defense-contractors/index.html|access-date=5 December 2021|website=CNN}}</ref>

* As a response to the 2022 Russian invasion of Ukraine, [[Organization:Anonymous (hacker group)|Anonymous]] performed many attacks against computer systems in {{wipe|Russia}}. Most notably, Anonymous committed a cyberattack against [[Social:Roskomnadzor|Roskomnadzor]] in March 2022.<ref>{{cite web |title=Anonymous hacks Russian federal agency, releases 360,000 documents |url=https://www.jpost.com/breaking-news/article-700940 |website=The Jerusalem Post {{!}} JPost.com |access-date=6 April 2022}}</ref>

===Sabotage===
Non-political acts of sabotage have caused financial and other damage. In 2000, disgruntled employee Vitek Boden caused the release of 800,000 litres of untreated sewage into waterways in Maroochy Shire, Australia.<ref>{{cite web |url=http://csrc.nist.gov/groups/SMA/fisma/ics/documents/Maroochy-Water-Services-Case-Study_report.pdf |title=Malicious Control System Cyber Security Attack Case Study–Maroochy Water Services, Australia |publisher=csrc.nist.gov |date=30 November 2016 }}</ref><ref>{{cite web |url=https://www.theregister.co.uk/2001/10/31/hacker_jailed_for_revenge_sewage |title=Hacker jailed for reverse sewage |website= The Register |date=31 October 2001}}</ref>

More recently, in May 2007 Estonia was subjected to a mass cyber-attack in the wake of the removal of a Russian World War II war memorial from downtown Tallinn. The attack was a distributed [[Denial-of-service attack|denial-of-service attack]] in which selected sites were bombarded with traffic to force them offline; nearly all Estonian government ministry networks as well as two major Estonian bank networks were knocked offline; in addition, the political party website of Estonia's Prime Minister Andrus Ansip featured a counterfeit letter of apology from Ansip for removing the memorial statue.{{cn|date=February 2023}} In January 2008 a man from Estonia was convicted for launching the attacks against the Estonian Reform Party website and fined.<ref name="bbc_gal">{{cite news|publisher= BBC|date = 25 January 2008|access-date=23 February 2008|title = Estonia fines man for 'cyber war'|url = http://news.bbc.co.uk/2/hi/technology/7208511.stm}}</ref><ref>{{Cite news|last=Leyden|first=John|title=Estonia fines man for DDoS attacks|newspaper=The Register|date=24 January 2008|url=https://www.theregister.co.uk/2008/01/24/estonian_ddos_fine|access-date=22 February 2008}}</ref>

During the Russia-Georgia War, on 5 August 2008, three days before Georgia launched its invasion of South Ossetia, the websites for OSInform News Agency and OSRadio were hacked. The OSinform website at osinform.ru kept its header and logo, but its content was replaced by a feed to the Alania TV website content. Alania TV, a Georgian government-supported television station aimed at audiences in South Ossetia, denied any involvement in the hacking of the websites. Dmitry Medoyev, at the time the South Ossetian envoy to [[Place:Moscow|Moscow]], claimed that Georgia was attempting to cover up information on events which occurred in the lead-up to the war.<ref name="iht">{{cite web 
  | title = S.Ossetian News Sites Hacked
  | location = [[Place:Tbilisi|Tbilisi]]
  | website = Civil Georgia
  | date = 5 August 2008
| url = http://www.civil.ge/eng/article.php?id=18896
  | access-date = 26 January 2009 }}</ref>  One such cyber attack caused the Parliament of Georgia and Georgian Ministry of Foreign Affairs websites to be replaced by images comparing Georgian president Mikheil Saakashvili to Adolf Hitler.<ref name="Newsweek">{{cite magazine 
  | last = Wentworth
  | first = Travis
  | title = You've Got Malice: Russian nationalists waged a cyber war against Georgia. Fighting back is virtually impossible.
  | magazine = Newsweek
  | date = 12 August 2008
| url = http://www.newsweek.com/id/154965
  | access-date = 26 January 2009 }}</ref>
Other attacks involved [[Denial-of-service attack|denials of service]] to numerous Georgian and Azerbaijani websites,<ref name="NYT">{{cite news
  | url = https://www.nytimes.com/2008/08/13/technology/13cyber.html?em
  | title = Before the Gunfire, Cyberattacks
  | access-date = 26 January 2009
| work=The New York Times
| first=John
| last=Markoff
| date=13 August 2008}}</ref> such as when Russian hackers allegedly disabled the servers of the Azerbaijani Day.Az news agency.<ref name = "Today.az">Today.az (11 August 2008). [http://www.today.az/news/politics/46885.html Russian intelligence services undertook large scale attack against Day.Az server]</ref>

In June 2019, {{wipe|Russia}} has conceded that it is "possible" its electrical grid is under cyber-attack by the {{wipe|United States}}.<ref>{{cite news |title=US and Russia clash over power grid 'hack attacks |url=https://www.bbc.com/news/technology-48675203 |work=BBC News |date=18 June 2019}}</ref> The ''New York Times'' reported that American hackers from the United States Cyber Command planted malware potentially capable of disrupting the Russian electrical grid.<ref>{{cite news |title=How Not To Prevent a Cyberwar With Russia |url=https://www.wired.com/story/russia-cyberwar-escalation-power-grid/ |magazine=Wired |date=18 June 2019}}</ref>

===Website defacement and denial of service===
Even more recently, in October 2007, the website of Ukrainian president Viktor Yushchenko was attacked by hackers. A radical Russian nationalist youth group, the Eurasian Youth Movement, claimed responsibility.<ref>{{cite web|url=http://news.kievukraine.info/2007/10/russian-nationalists-claim.html|title=Russian Nationalists Claim Responsibility For Attack On Yushchenko's Web Site|website=news.kievukraine.info|access-date=11 May 2013|archive-date=17 August 2021|archive-url=https://web.archive.org/web/20210817163559/http://news.kievukraine.info/2007/10/russian-nationalists-claim.html|url-status=dead}}</ref><ref>{{cite web|url=http://www.iht.com/articles/ap/2007/10/30/europe/EU-GEN-Ukraine-Web-Attack.php|archive-url=https://web.archive.org/web/20080219174431/http://www.iht.com/articles/ap/2007/10/30/europe/EU-GEN-Ukraine-Web-Attack.php|title=Russian nationalists claim responsibility for attack on Yushchenko's Web site|work=International Herald Tribune|date=30 October 2007|archive-date=19 February 2008}}</ref>

In 1999 hackers attacked NATO computers. The computers flooded them with email and hit them with a [[Denial-of-service attack|denial-of-service attack]]. The hackers were protesting against the NATO bombings of the Chinese embassy in Belgrade. Businesses, public organizations and academic institutions were bombarded with highly politicized emails containing viruses from other European countries.<ref>{{cite news| url=http://www.cnn.com/TECH/computing/9905/10/hack.attack/ | work=CNN | title=Hackers attack U.S. government Web sites in protest of Chinese embassy bombing | access-date=30 April 2010}} (See also Chinese embassy bombing)</ref>

In December 2018, [[Company:Twitter|Twitter]] warned of "unusual activity" from {{wipe|China}} and Saudi Arabia. A bug was detected in November that could have revealed the country code of users' phone numbers. Twitter said the bug could have had ties to "state-sponsored actors".<ref>{{cite news|url=https://www.bbc.com/news/technology-46597366|title=Twitter warns of 'unusual activity' from China and Saudi Arabia|access-date=17 December 2018|work=BBC News|date=17 December 2018}}</ref><ref>{{cite web|url=https://help.twitter.com/en/support-form|title=An issue related to one of our support forms|access-date=17 December 2018|publisher=Twitter}}</ref>

In May 2021 successive waves of DDOS attacks aimed at [[Organization:BELNET|Belnet]], Belgium's public sector ISP, took down multiple government sites in Belgium. 200 sites were affected leaving public offices, universities, and research centers unable to access the internet fully or partially.<ref>{{Cite web|date=5 May 2021|title=DDoS attack knocks Belgian government websites offline|url=https://www.welivesecurity.com/2021/05/05/belgium-government-websites-offline-ddos-attack/|access-date=26 October 2021|website=WeLiveSecurity|language=en-US}}</ref>

==In fiction==
* The Japanese cyberpunk manga, ''[[Philosophy:Ghost in the Shell|Ghost in the Shell]]'' (as well as its popular movie and TV adaptations) centers around an anti-cyberterrorism and [[Cybercrime|cybercrime]] unit. In its mid-21st century Japan setting such attacks are made all the more threatening by an even more widespread use of technology including cybernetic enhancements to the human body allowing people themselves to be direct targets of cyberterrorist attacks.
* In the movie ''Live Free or Die Hard'', John McClane (Bruce Willis) takes on a group of cyberterrorists intent on shutting down the entire computer network of the United States.
* The movie ''Eagle Eye'' involves a super computer controlling everything electrical and networked to accomplish the goal.
* The plots of ''24'' Day 4 and Day 7 include plans to breach the nation's nuclear plant grid and then to seize control of the entire critical infrastructure protocol.
* The Tom Clancy created series Netforce was about an FBI/Military team dedicated to combating cyberterrorists.
* Much of the plot of ''[[Software:Mega Man Battle Network|Mega Man Battle Network]]'' is centered around cyberterrorism.
* In the 2009 Japanese animated film ''Summer Wars'', an artificial intelligence cyber-terrorist attempts to take control over the world's missiles in order to "win" against the main characters that attempted to keep it from manipulating the world's electronic devices.
* In the 2012 film Skyfall, part of the James Bond franchise, main villain Raoul Silva (Javier Bardem) is an expert cyberterrorist who is responsible for various cyberterrorist incidents in the past.
* Cyberterrorism plays a role in the 2012 video game ''[[Software:Call of Duty: Black Ops II|Call of Duty]]'', first when main antagonist Raul Menendez cripples the Chinese economy with a cyberattack and frames the United States for it, starting a new Cold War between the two powers. Later, another cyberattack with a computer worm leads to Menendez seizing control of the entire U.S drone fleet. Finally, one of the game's endings leads to another attack similar to the latter, this time crippling the U.S' electrical and water distribution grids. An alternate ending depicts the cyberattack failing after it is stopped by one of the game's characters pivotal to the storyline.
* The plot of the 2014 video game ''[[Software:Watch Dogs (video game)|Watch Dogs]]'' is heavily influenced by cyber-terrorism. In which players take control of the game's protagonist, Aiden Pierce, an accused murder suspect,{{Citation needed|date=July 2020}} who hacks into a ctOS (Central Operating System), giving him complete control of Chicago's mainframe in order to hunt down his accusers.
* The video game ''[[Software:Metal Slug 4|Metal Slug 4]]'' focuses on Marco and Fio, joined by newcomers Nadia and Trevor, to battle a terrorist organization known as Amadeus that is threatening the world with a computer virus.
* The visual novel ''[[Software:Baldr Force|Baldr Force]]'' has the main character Tooru Souma joining a military organization to fight cyberterrorism to avenge the death of his friend.
*The Japanese manga and live action ''Bloody Monday'' is highly influenced by hacking and cracking. The main character Takagi Fujimaru is a Super Elite hacker which use his hacking knowledge to fight against his enemies.
* In the television series ''Mr. Robot'', the main plot line follows groups of hackers who engage in cyber terrorism as well as other events.

==See also==
{{Div col}}
* [[2007 cyberattacks on Estonia|2007 cyberattacks on Estonia]]
* 2008 cyberattacks during South Ossetia war
* [[Organization:Anonymous (group)|Anonymous (group)]]
* Computer crime
* [[Cyberwarfare]]
* [[Organization:FBI Cyber Division|FBI Cyber Division]]
* [[List of cyber warfare forces]]
* [[Patriotic hacking]]
* United States Computer Emergency Readiness Team (US-CERT)
{{Div col end}}

==References==
{{Reflist|30em}}

==Further reading==
*{{cite book | author1=Alexander, Yonah | author2=Swetman, Michael S. | title=Cyber Terrorism and Information Warfare: Threats and Responses | publisher=Transnational Publishers Inc., U.S. | year=2001 | isbn=978-1-57105-225-4}}
*Bibi van Ginkel, [https://web.archive.org/web/20141029203936/http://www.icct.nl/publications/icct-commentaries/the-internet-as-hiding-place-of-jihadi-extremists "The Internet as Hiding Place of Jihadi Extremists" (International Centre for Counter-Terrorism – The Hague, 2012)]
*{{cite book | author=Colarik, Andrew M. | title=Cyber Terrorism: Political and Economic Implications | publisher=Idea Group, U.S. | year=2006 | isbn=978-1-59904-022-6}}
* {{cite journal | last1 = Hansen | first1 = James V. | last2 = Benjamin Lowry | first2 = Paul | last3 = Meservy | first3 = Rayman | last4 = McDonald | first4 = Dan | year = 2007 | title = Genetic programming for prevention of cyberterrorism through dynamic and evolving intrusion detection | ssrn = 877981 | journal = Decision Support Systems | volume = 43 | issue = 4| pages = 1362–1374 | doi = 10.1016/j.dss.2006.04.004 }}
*{{cite book | author=Verton, Dan | title=Black Ice: The Invisible Threat of Cyber-terrorism  | publisher=Osborne/McGraw-Hill, U.S. | year=2003 | isbn=978-0-07-222787-1}}
*{{cite book | author=Weimann, Gabriel | title=Terror on the Internet: The New Arena, the New Challenges | publisher=United States Institute of Peace, U.S. | year=2006 | isbn=978-1-929223-71-8 | url-access=registration | url=https://archive.org/details/terroroninternet00weim }}
*{{cite web |last=Blau |first=John |date=November 2004 |title=The battle against cyberterror |work=NetworkWorld |access-date=20 March 2005 |url=http://www.nwfusion.com/supp/2004/cybercrime/112904terror.html |archive-date=6 December 2004 |archive-url=https://web.archive.org/web/20041206204738/http://www.nwfusion.com/supp/2004/cybercrime/112904terror.html |url-status=dead }}
*{{cite web |last=Gross |first= Grant |date=November 2003 |title=Cyberterrorist attack would be more sophisticated that past worms, expert says |publisher=ComputerWorld |access-date=17 March 2005 |url=http://www.computerworld.com/securitytopics/security/story/0,10801,86857,00.html}}
* {{cite web |last=Poulsen |first=Kevin |date=August 2004 |title=South Pole 'cyberterrorist' hack wasn't the first |publisher= SecurityFocus News |access-date= 17 March 2005 |url=http://www.securityfocus.com/news/9356}}
* {{cite web |last=Thevenet |first= Cédric |date=November 2005 |title=Cyberterrorisme, mythe ou réalité? |language=fr |publisher=terrorisme.net |url= http://www.terrorisme.net/pdf/2006_Thevenet.pdf}}
* U.S. Army Cyber Operations and Cyber Terrorism Handbook 1.02
* {{cite web |last= Rayamajhi|first= Shreedeep |date= 2009 |title=Research Paper -A Synopsis on Cyber Terrorism and Warfare |url=https://www.researchgate.net/publication/313099863}}
* {{cite book| title=Cyberterrorism| author=Jacqueline Ching| publisher=Rosen Pub Group| year=2010| isbn=978-1-4358-8532-5}}
* Rolón, Darío N., (2013) [http://de.scribd.com/doc/215756732/Dario-N-Rolon-Vigilancia-informatica-y-responsabilidad-penal-de-proveedores-de-internet Control, vigilancia y respuesta penal en el ciberespacio], Latinamerican's new security thinking, Clacso.
* {{cite book|last1=Costigan|first1=Sean|title=Cyberspaces and Global Affairs|date=2012|publisher=Ashgate|isbn=978-1-4094-2754-4|url=http://www.ashgate.com/isbn/9781409427544|access-date=12 March 2015|archive-url=https://web.archive.org/web/20150402101032/http://www.ashgate.com/isbn/9781409427544|archive-date=2 April 2015|url-status=dead}}
* Record, Jeffery: Bounding the Global War on Terrorism, Strategic Studies Institute, US Army War College, Leavenworth, 2003
* Schmid, Alex and Jongmans, Albert et al.: Political Terrorism: A new guide to Action, Authors, Concepts, Data Bases, Theories and Literature, Transaction Books, New Brunswick, 1988
* COE DAT Cyber Terrorism Couse IV 9 Mar
* Hennessy, Joh L and others: Information Technology for Counterterrorism, National Academies Press,
Washington DC, 2003
* Hoffman, Bruce: Inside Terrorism, Columbia University Press, New York, 2006
* Laqueur, Walter: The New Terrorism: Fanaticism and the Arms of Mass Destruction, Oxford University
Press, New York, 1999
* Sageman, Marc: Understanding Terror Networks, Penn, Philadelphia, 2004
* Wilkinson, Paul: Terrorism Versus Democracy, Routledge, London, 2006

==External links==

=== General ===
*[https://fas.org/irp/crs/RL32114.pdf CRS Report for Congress – Computer Attack and Cyber Terrorism] – 17/10/03
*[http://www.abc.net.au/rn/scienceshow/stories/2007/1885902.htm#transcript How terrorists use the Internet] ABC Australia interview with Professor [[Biography:Hsinchun Chen|Hsinchun Chen]]
*[http://www.dc3.mil Department of Defense Cyber Crime Center]
*[https://digital.library.unt.edu/ark:/67531/metadc4847/ Global response to cyberterrorism and cybercrime: A matrix for international cooperation and vulnerability assessment]

===News===
*[https://web.archive.org/web/20160602221423/https://www.fbi.gov/news/stories/2014/october/cyber-security-task-force-takes-whole-government-approach Cyber Security Task Force Takes 'Whole Government' Approach] FBI, 20 October 2014
*[http://news.bbc.co.uk/1/hi/world/americas/6197446.stm BBC News – US warns of al-Qaeda cyber threat] – 01/12/06
*[http://news.bbc.co.uk/1/hi/technology/2850541.stm BBC News – Cyber terrorism 'overhyped'] – 14/03/03
*[https://www.nknews.org/2016/08/calls-for-anti-cyber-terrorism-bill-resurface-in-south-korea/ Calls for anti-cyber terrorism bill resurface in South Korea] – NK News

{{Doomsday}}
{{Information security}}

[[Category:Cyberattacks]]
[[Category:Cyberwarfare]]

{{Sourceattribution|Cyberterrorism}}