The Digital Frontier of Modern War
Nov 27, 2024
Space sector has slowly emerged as a theatre of war between Ukraine and Russia, which exposes hitherto unseen frailties in technological systems. A study was conducted by the ETH Zurich’s Center for Security Studies, and the findings published provided an elaborate understanding of the diverse cyber operations aimed at organizations involved in space affairs. By meticulously analyzing data collected from hacker groups on messaging platforms, they discovered a startling reality: 124 cyberattacks had been launched against the space sector and thereby proved the fact that contemporary warfare is no longer restricted to geographical borders.
Swiss Federal Institute of Technology Zurich. Credit: Google
The conclusions of the study pointed out that these attacks were not sporadic, but represent a coherent plan to gradually dismantle the international space infrastructure. Of the mentioned operations, 57 different targets were under attack which include Starlink, NASA, Lockheed Martin, Boeing and major national space agencies. The distribution of these attacks was telling: 61 percent aimed at space companies, 32 percent were aimed at space agencies, and 3 percent were aimed at research institutes, which proved the key role of the commercial space systems in the modern warfare.
The Anatomy of Cyber Attacks in Space
Many might think of cyber warfare as high-profile attacks on satellites in space, but the reality is much different. In fact, the study showed that none of the identified cyber operations affected satellites in space. Thus, the main objective of the attackers remained the terrestrial critical infrastructure with 76 percent of the attacks being aimed at websites, portals with authentication, computer systems. The attacks were overwhelmingly DDoS operations, accounting for 65 percent of the attacks, while intrusions and hack-and-leak attacks accounted for the rest. Despite Ukraine not having any sovereign satellite, many of its aerospace organizations or its ground structures got hit. Some hackers tried to get the coordinates and details regarding the systems such as the space internet service by SpaceX’s Starlink, and thus, showing how complex an actual cyber war is. The attacks were not mere technology assisted activities but operations of coordinated operations with an offer intelligence collection and communication jamming.
The IT Army of Ukraine group patch. Credit: Google
Much of the information made available by the study reflects on hacktivism during the war: the analysis demonstrated an unprecedented level of computer usage and technological support. The authors identified 12 pro-Ukrainian and 19 pro-Russian hacktivist groups engaged in cyber operations, which illustrates the globalization and decentralization of contemporary cyber warfare. The most active group was the IT Army of Ukraine, while NoName057(16) was the most engaged on the Russian side. These groups were indicative of a new kind of warfare that can be produced by individuals and minimally organized groups and that can have a major impact in military and technological systems. However, not all hacktivist groups worked as professional and well-equipped as the ones mentioned above, nor did they enjoy government support. Some like Killnet demanded government recognition and may or may not have been acknowledged. This made the whole landscape of cyber actors less distinct and clear with the traditional distinction between state-backed and freelance cyber actors, making the battlefield more fluid and dynamic.
Global Implications and Expanding Battlegrounds
The war in Ukraine serves as a microcosm of a broader emerging trend in cyber warfare, illustrating the increasingly complex and interconnected nature of digital conflict across global geopolitical landscapes. Scientists noted that similar patterns could be observed in other geopolitical contexts, such as the conflict between Israel and Palestine, where hacker communities also attacked space-related entities. This implies a possible radicalization of the nature of wars and the pivotal strategic roles of digital infrastructures. State actors have also shown considerable concern for the space sector, albeit more discreetly. Microsoft and OpenAI has noted that they have found that the pro-Russian groups are using Large Language Models to look for space technology and possible targeting schemes. The government of United States has also detected hackers working for the Russian intelligence agency who were charging aerospace sector and this shows that there is an evolution in the threats going on around in the world.
Space Information Sharing and Analysis Center (Space ISAC) watch center in Colorado Springs. Credit: Space ISAC
The study further pointed out that the 124 operations were likely just the tip of the iceberg, indicating that the threat is systemic and sweeping rather than sporadic. Speaking during a forum, Space ISAC Executive Director Erin Miller stated that about 100 attacks per week were directed at critical American infrastructures that depend on space systems. The first cyberattack on Viasat occurred just hours before the attack on Ukraine and became a turning point, highlighting how exposed space-related technologies are. Another relevant incident involved the company Viasat, which was targeted even after the initial strike in the cyber warfare domain. Many of the attacks experienced were basic and had impacts that were only temporarily noticeable, yet they demonstrated the possibility of disrupting key technological systems.
A New Technological Battlefield
The detailed analysis of the cyber attacks in the space sector during Ukraine-Russia war shows a massive change in the warfare system. A clear distinction between military operations and hacktivism has become increasingly difficult, as state-sponsored actions, freelance cyber warfare, and hacktivist activities have emerged, creating a highly flexible and volatile environment. This area, formerly regarded as a field of scientific research and technological development, is a strategic sphere in which ongoing warfare is carried out using information technologies. Since technology is a fluid concept, so are the approaches and strengths of cyber warfare. These capabilities to disrupt, gather intelligence and possibly remove space-based assets are a new dimension in military and geo-political warfare. Thus, both nations and organizations have to learn and strengthen their cybersecurity, as well as to create effective defense and attack capabilities to operate in this new technologically developed world.
However, dependency of the current technological environment is such that a particular weakness in one of the systems can lead to a chain reaction affecting telecommunication, finance, transportation, and public safety. Space is already a warzone, and the future of conflict is not merely on the horizon but is present and urgent. Greater cooperation between nations, improved technological safeguards and an understanding of the changing nature and methods of cyber war will be important in reducing threats and defending the increasingly connected world. In the future, it will be increasingly important to be able to predict, reduce the likelihood of, and effectively counter such threats in order to define the approaches to national and international security in the twenty-first century.
