We are at Cyberwar: a global guide to nation-state digital attacks
Whilst a relatively shallow article in terms of detail, this overview from Wired serves a a quick reference guide to who is doing what to whom (as far as is known).
Francesco Muzzi

Every month, it seems, a mammoth cyberattack sponsored by a nation-state comes to light. In recent years, more than 20 countries have announced their intent to launch or beef up their offensive cyber capabilities. The result is a burgeoning digital arms race that presents a major threat to the security of our data. Here’s a look at the countries that have garnered the most headlines in the past few years and a comparison of how their cyber-offensive capabilities stack up. Our assessment is, of course, based only on known attacks. And attribution is often tricky. It’s difficult, forensically, to distinguish nation-state attacks from those of independent groups—even more so when China and Russia use state hackers and also pay freelancers when they gain access to useful systems. Amid the intrigue and mystery, one thing is clear—the online world is becoming an increasingly dangerous place.

### United States

2001–2015: Target: the world. Seriously, the NSA’s reach appears to be limitless, according to documents leaked by Edward Snowden, which describe a vast hacking operation aimed at subverting the Internet’s infrastructure. OUTCOME: Global paranoia and a reduction in security for all.

2007: The US launched the Stuxnet worm against Iran to sabotage that country’s nuclear program. OUTCOME: Stuxnet succeeded in briefly setting back the Iranian nuclear program. The attack set a precedent for cyberwarfare, wherein countries launch digital assaults to resolve political disputes.

### China

2009–2011: China allegedly hacked Google, RSA Security, and other companies to obtain source code and other sensitive data. OUTCOME: The hackers who breached RSA Security obtained core data used in the company’s two-factor authentication scheme favored by governments and corporations.

2014: China breached several databases belonging to the US Office of Personnel Management. OUTCOME: The hackers stole sensitive data, including Social Security numbers, relating to more than 21 million people interviewed for government background checks.

### United Kingdom

2009–2013: The UK hacked Google’s and Yahoo’s undersea cables to siphon unencrypted traffic. OUTCOME: According to documents leaked by Snowden, the UK accessed data through taps of undersea cables belonging not just to these companies but to major telecoms too.

2012: The UK’s Government Communications Headquarters hacked Belgacom to monitor all mobile traffic passing through its routers. OUTCOME: Although the hack successfully penetrated the network, the telecom has never been clear about whether the attackers intercepted customer traffic.

### Israel

2014: Israel allegedly hacked Russian security firm Kaspersky Lab to obtain intel on its research about nation-state attacks. It also struck venues in Europe where the UN Security Council met to negotiate Iran’s nuclear program. OUTCOME: The attackers may have obtained intel about Kaspersky’s research.

2012: Suspected of launching the Wiper attack against the Iranian oil ministry and the National Iranian Oil Company. OUTCOME: The malware wiped hard-drive data, then erased system files, causing the machines to crash and preventing them from rebooting. Iran insisted it had data backups.

### North Korea

2014: Sony Pictures Entertainment was paralyzed by an attack. The US attributed the action to North Korea and applied additional economic sanctions against the country and specific officials. OUTCOME: The attackers nabbed gigabytes of internal data and communications, which they later posted online.