X Close

Nato is unprepared for Russia’s cyber warfare

A new arena of conflict. Credit: Getty

November 25, 2024 - 10:00am

In the final years of the Second World War, as the Allied governments anticipated the defeat of Nazi Germany, Lancaster House was the seat of the European Advisory Commission, which was charged with recommending solutions to the political problems in a post-war Europe. This week, Lancaster House will host the Nato Cyber Defence Conference, where the alliance will discuss a very different set of problems in what looks disconcertingly like a pre-war Europe.

One of these problems is the growing likelihood of cyber attacks launched by Russia on Nato countries. Yesterday, The Sunday Telegraph published excerpts of a speech that is to be made later today by Pat McFadden, Chancellor of the Duchy of Lancaster, addressing this threat. McFadden will reportedly warn that “Russia is exceptionally aggressive and reckless in the cyber realm”, and would be able to “turn the lights off for millions of people. It can shut down the grid. This is the hidden war Russia is waging with Ukraine.”

In addition to being a testing ground for new weaponry such as AI-assisted drones and hypersonic missiles, the war in Ukraine has become an arena for large-scale cyber warfare. Russia’s cyber attacks on Ukraine began in 2015, long before the 2022 invasion, in the first confirmed cyber operation on a national energy grid — which actually did turn the lights off for hundreds of thousands of Ukrainians. Similar attacks have been repeated throughout the war, most notably in the first months of the invasion, in concert with kinetic attacks on the grid.

However — and with some irony — as a legacy of the Soviet Union, Ukraine’s energy grid is state-owned, and therefore has significant reserve capacity, making it resilient to such attacks. By contrast, many of Europe’s energy grids are controlled by the market, which maximises for efficiency, but leaves them vulnerable. One of the main topics at this week’s conference will be how to build similar resilience into European and Nato countries’ grids.

Cyber, however, is only one piece of Russia’s hybrid-warfare model — the integration of numerous non-military means of conflict and proxy wars, backed by the threat of military force, to achieve strategic goals. The origins of the doctrine were conceived by General Valery Gerasimov in an article published in 2013, in which he wrote that “the role of non-military means of achieving political and strategic goals has grown, and in many cases, they have exceeded the power of force of weapons in their effectiveness.”

With the war taking up so much attention in the media, it is easy to miss the escalating string of these “non-military means” of destabilisation which have been deployed against European countries since it began. These have included instances of sabotage and arson, GPS-signal jamming, disinformation campaigns, weaponised people-smuggling, and phone-hacking — much of it variously connected to Russia. This is hybrid warfare in action, deployed to disrupt, confuse, and blur the lines between peace and wartime.

Due to this ambiguity, many of these tactics are difficult to effectively respond to, or prevent. Nato was originally conceived — and essentially still exists — to deter against an invasion or nuclear attack on Europe. Strategically, the alliance hasn’t adapted for this new era of hybrid warfare, whose low-threshold, non-military and plausibly deniable tactics do not clearly fall within the purview of Nato’s Article 5. This means that, so far, the hybrid war being fought is effectively an asymmetric one.

This asymmetry, however, isn’t sustainable. If Donald Trump reaches a settlement in Ukraine across the current lines of control, Washington will begin shifting attention and resources to the Indo-Pacific for more pressing matters. Russia can then be expected to continue its campaign of harassment as a means of bullying Europe into accepting an expanding sphere of influence. As Europe prepares to take primary responsibility for its own security, this new order must include a coherent strategy to deal with Moscow’s hybrid threats, including how and when to respond. As critical as this week’s Cyber Defence Conference is, it shouldn’t miss the wood for the trees.


Patrick Hess is a London-based writer who covers politics, culture and international relations.

Join the discussion


Join like minded readers that support our journalism by becoming a paid subscriber


To join the discussion in the comments, become a paid subscriber.

Join like minded readers that support our journalism, read unlimited articles and enjoy other subscriber-only benefits.

Subscribe
Subscribe
Notify of
guest

12 Comments
Most Voted
Newest Oldest
Inline Feedbacks
View all comments
Steven Carr
Steven Carr
4 hours ago

‘ These have included instances of sabotage and arson, GPS-signal jamming, disinformation campaigns, weaponised people-smuggling,…’
Weaponised people-smuggling?
Starmer is readying Britain’s hotels to defend against this….

John Tyler
John Tyler
4 hours ago

Surely the headline should be simply: UK not ready for any facet of war.

Alex Lekas
Alex Lekas
1 hour ago

Are people itching to get their Cold War back? For years and years, Europe loved the highly affordable energy that Putin provided. Its economies, particularly Germany’s, benefitted from it.
There were no shrill threats of expansionism or invasion or whatever else. There was, however, the endless effort push NATO eastward despite warnings that this would end badly. There were multiple instances of meddling in Ukraine’s govt in hopes of seating “the right” leader. And it’s not like the West is alien to this cyber stuff.
It looks like there, as here, there is a great determination to continue pushing for further conflict, for greater escalation. To what end?

Dennis Roberts
Dennis Roberts
16 minutes ago
Reply to  Alex Lekas

Or maybe Putin has always meant what he has said about getting back control over Eastern Europe?

Peter B
Peter B
4 hours ago

I’m not sure why the author assumes that Russia’s cyber warfare capabilities would be superior to those of the West.
The fact that Russia (and China) appear to be more active in this area tells you almost nothing about their relative capabilities and strengths compared to those of the US. We can be fairly certain that the real capabilities of the US are greater than what’s been on public display.
We know, for example, that Israel used the Stuxnet virus to cripple Iran’s uranium enrichment centrifuges.
Why does he assume that the Russian power generation network would be any more robust than those in the West ? Or the Russian oil and gas industry (for which much of the heavy technical work was done by Western consultants until the 2022 sanctions were applied).
We also know from WWII that British and US security technology was far superior to that of Germany and Japan. To suggest that we don’t know what we’re doing in this domain seems foolish.

Graham Stull
Graham Stull
4 hours ago

I’m stocking 90s era dos video games on CD-ROM (Diablo II, Warcraft II…), to play in my basement.
Just in case.

Last edited 4 hours ago by Graham Stull
Brett H
Brett H
2 hours ago

Another nothing story. Nothing new to tell. Maybe the writer got a PR release from Pat McFadden, Chancellor of the Duchy of Lancaster and made a few edits.

Dennis Roberts
Dennis Roberts
2 hours ago
Reply to  Brett H

“where the alliance will discuss a very different set of problems in what looks disconcertingly like a pre-war Europe.”

Is that not new?

Steven Carr
Steven Carr
2 hours ago

Putin warns that unstoppable missiles will hit countries supplying missiles to Ukraine.
So the government immediately starts talking about cyber-warfare…..
Disinformation.

Last edited 2 hours ago by Steven Carr
Dennis Roberts
Dennis Roberts
2 hours ago
Reply to  Steven Carr

Or perhaps it just takes a while for them to prepare the message and get it out?

Lancashire Lad
Lancashire Lad
35 minutes ago
Reply to  Steven Carr

The Lancaster House event will have taken months to plan, so why make a facile point about a very serious subject? And then, use the “disinformation” line which is precisely what brings the use of it into disrepute.

Citizen Diversity
Citizen Diversity
2 minutes ago

‘A pre-war Europe’? Wasn’t ‘pre-war’ before New Labour and George W Bush, albeit not yet in Europe?
Why does Europe look ‘increasingly’ pre-war? Have the governments decided this as a matter of policy? Or just avoided formulating a policy to avoid it? After all, the Russian army is unlikely to be in Paris by the New Year.
At least when the lights go out in the UK, the Russians can be blamed, not a balmy day or the demolition of coal-fired power stations.