Digital Cold War: State Cyber Espionage
Nations increasingly use cyber attacks like hacking and disinformation for espionage and to assert power, impacting global security and diplomacy.
Topics: technology, politics, media
Example
In December 2020, investigators revealed the SolarWinds hack, in which hackers slipped malicious code into updates of SolarWinds' Orion network software. About 18,000 customers downloaded the tainted update between March and June 2020, but the hackers chose to break into a much smaller number: around 100 companies, including Microsoft, Intel and Cisco, and about a dozen US government agencies, including the Treasury, Justice and Energy departments. In April 2021, the US government formally blamed Russia's foreign intelligence service (SVR).
Key facts
- About 18,000 SolarWinds customers downloaded the tainted Orion update between March and June 2020.
- The hackers actually breached around 100 companies and about a dozen US government agencies.
- In April 2021 the US government formally attributed the SolarWinds campaign to Russia's SVR.
Limitations
- Attribution rests on US government and industry analysis; Russia denied involvement, and the full damage to the agencies breached was never made public.
Evaluations
technology evaluation
Support
By poisoning a trusted software update, the hackers reached thousands of networks through one supplier, showing how modern software supply chains create single points of failure.
Counterargument
The attackers only exploited a small share of the 18,000 networks, so the real damage was narrower than the headline number suggests.
Rebuttal
Choosing about 100 high-value targets is a sign of a disciplined spy operation, not of limited capability; the access was there for many more.
Additional support
The attack was found by a private security firm, FireEye, after it was itself breached, not by government defenders, showing reliance on industry for detection.
politics evaluation
Support
The US responded with sanctions and expelled Russian diplomats, showing cyber espionage is now treated as a matter of state relations.
Counterargument
Spying is a normal activity between states, and the US conducts its own cyber espionage, so treating SolarWinds as an attack can be called hypocritical.
Rebuttal
The difference critics point to is method: compromising software used by thousands of private customers puts ordinary users at risk, not only government targets.
Additional support
The case pushed the US to issue a 2021 executive order requiring better security from software suppliers to the government.
media evaluation
Support
The hack went unnoticed for months, showing how cyber operations, unlike conventional attacks, can stay hidden from the public.
Counterargument
Early news reports described 18,000 organisations as hacked, which overstated the damage and fed public alarm.
Rebuttal
Later reporting corrected the scale, showing that careful journalism can refine fast-moving security stories.
Additional support
Public attribution by governments now relies on publishing technical evidence through the media, which shapes international opinion.
Sources
- NPR (via KUNC) (2021-04-16): A 'Worst Nightmare' Cyberattack: The Untold Story Of The SolarWinds Hack
- The White House (archived) (2021-04-15): Fact Sheet: Imposing Costs for Harmful Foreign Activities by the Russian Government