Many countries around the world maintain military units that are specifically trained to operate in a
cyberwarfare environment. In several cases these units act also as the national
computer emergency response team for civilian
cybersecurity threats.
Albania
Military Cyber Security Unit (Një e Sigurisë Kibernetike)[1]
Argentina
Joint Cyber Defense Command of the Armed Forces Joint Staff (Comando Conjunto de Ciberdefensa del Estado Mayor Conjunto de las Fuerzas Armadas)[2]
Cyberdefense Operations Center (Centro de Operaciones de Ciberdefensa)[2]
Cyberdefense Engineering Center (Centro de Ingenieria de Ciberdefensa)[2]
Security Operations Intelligent Center (Centro Inteligente de Operaciones de Seguridad)[3]
National Cyberdefense Center (Centro Nacional de Ciberdefensa)[3]
Informatic Energencies Response Center of the Defense Ministry (Centro de Respuesta ante Emergencias Informáticas del Minisetrio de Defensa)[3]
Cybernetic Analysis Laboratory (Laboratorio de Análisis Cibernéticos)[3]
Information Communications Technologies and Cybersecurity Center (Informations-Kommunikations-Technologie und Cybersicherheitszentrum)[10]
Azerbaijan
Special Communication and Information Security State Service (Xüsusi Rabitə və İnformasiya Təhlükəsizliyi Dövlət Xidməti)[11]
Belarus
Information Technology Specialized Company (Специализированную роту по информационной безопасности - Spetsializirovannuyu Rotu po Informatsionnoy Bezopasnosti)[12]
Stationary Communication Information System (Стационарна Комуникационна Информационна Система - Statsionarna Komunikatsionna Informatsionna Sistema)[20]
56th Jiangan Computing Technologies Research Institute (第56江南计算技术研究所 - Dì 56 Jiāngnán Jìsuàn Jìshù Yánjiū Suǒ)[24]
57th Research Institute (第57研究所 - Dì 57 Yánjiū Suǒ)[25]
58th Research Institute (第58研究所 - Dì 58 Yánjiū Suǒ)[25]
Cyberspace Security Academy (网络空间安全学院 - Wǎngluò Kōngjiān Ānquán Xuéyuàn)[24]
China (Republic of China/“Taiwan”)
Information Communication and Electronic Warfare Command (信息和电子战司令部 - Xìnxī Hé Diànzǐ Zhàn Sīlìng Bù)[26]
Colombia
Joint Cybernetic Command (Comando Conjunto Cibernetico)[27]
National Army Cybernetic Unit (Unidad Cibernética Ejército Nacional)[27]
National Navy Cibernetic Unit (Unidad Cibernética Armada Nacional)[27]
Air Force Cybernetic Unit (Unidad Cibernética Fuerza Aérea)[27]
Communications and Cyberdefense Operational Support Command (Comando de Apoyo Operacional de Comunicaciones y Ciberdefensa)[28]
Croatia
Cybernetic Domain Command of the General Staff (Zapovjedništvo za Kibernetički Prostor Generalštaba)[29]
Cuba
Military Cyberdefense Command (Mando Militar de Ciberdefensa)[30][31]
Cyprus
Cyber Defense Command of the General Staff of National Defense (Διοίκηση Κυβερνοάμυνας του Γενικού Επιτελείου Εθνικής Άμυνας - Dioíkisi Kyvernoámynas tou Genikoú Epiteleíou Ethnikís Ámynas)[32]
Czech Republic
National Cyber Operations Centre (Národní Centrum Kybernetických Operací)[33]
Center for Cyber Security (Center for Cybersikkerhed)[35]
Dominican Republic
Armed Forces Command, Control, Communications, Computers, Cybersecurity and Intelligence Center (Centro de Comando, Control, Comunicaciones, Computadoras, Ciberseguridad e Inteligencia de las Fuerzas Armadas)[36]
Ecuador
Cyberdefense Command (Comando de Ciberdefensa)[27]
Operational Center for Land Information and Communication Systems and Cybersecurity Networks (Centre Opérationnel des Réseaux SIC (Systèmes d’Information et de Communication) Terre et de Cybersécurité)[41]
807th Signal Company (807e Compagnie de Transmission)[42]
Cyber Operations Center (Zentrum Cyber-Operationen)[51]
Greece
Cyber Defense Directorate of the General Staff of National Defense (Διεύθυνση Κυβερνοάμυνας του Γενικού Επιτελείου Εθνικής Άμυνας - Diéfthynsi Kyvernoámynas tou Genikoú Epiteleíou Ethnikís Ámynas)[52]
Guatemala
Computing and Technology Command (Comando de Informática y Tecnología)[53]
Hungary
Cyber Defense Center - Military National Security Service (Kibervédelmi Központ - Katonai Nemzetbiztonsági Szolgálat)[54]
6th Technical Bureau of the Reconnaissance General Bureau[89][86]
Bureau/
Lab 110 / 110 Institute (Technology Reconnaissance Team, conducts computer network operations against military units and strategic organizations.[86][80])
3rd Bureau of the RGB (AKA 3rd Technical Surveillance Bureau, responsible for North Korea's cyber operations)[87]
The Data Investigation Examination Office (conducts cyber espionage to collect intelligence on politics, economics, and societies abroad)[80]
KWP's Unification and United Front Department (cyber influence operations through social media and websites such as Uriminzokkiri, which is maintained by the party's Committee for the Peaceful Reunification of the Fatherland.[80])
The State Security Department's (secret police) communications monitoring and computer hacking group conducts cyber warfare, presumably in support of its mission of internal state security.[81][80]
Korea (Republic of Korea/“South Korea”)
Cyber Operations Command (사이버 작전 사령부 - Saibeo Jagjeon Salyeongbu)[92]
Cyber Defense Computer Information Services (CIS) Regiment (Cyberforsvarets CIS-regiment) [111]
Cyber Security Center (Cybersikkerhetssenteret) [111]
Cyber Defense Weapons School (Cyberforsvarets Våpenskole) [111]
Cyber Defense Information and Communication Technologies (ICT) Service (Cyberforsvarets IKT-tjenester) [111]
Cyber Defense Base and Alarm Service (Cyberforsvarets Base- og Alarmtjenester) [111]
Paraguay
General Directorate of Information and Communication Technologies of the Armed Forces (Dirección General de Tecnologías de la Información y Comunicación de las Fuerzas Armadas)[112]
Peru
Cyberdefense Operational Command (Comando Operacional de Ciberdefensa)[113]
Cybernetic Operations Center (Centrum Operacji Cybernetycznych)[115]
National Center for Cyberspace Security (Narodowe Centrum Bezpieczeństwa Cyberprzestrzeni)[116]
Defense Ministry Coordination Center for Computer Incident Response - Military Counterintelligence Service (Centrum Koordynacyjnego Systemu Reagowania na Incydenty Komputerowe Obrony Narodowej - Służba Kontrwywiadu Wojskowego)[117]
Cyberspace Defense Forces (Wojska Obrony Cyberprzestrzeni)[118]
Portugal
Cyberdefense Center - Armed Forces General Staff (Centro de Ciberdefesa – Estado Maior General das Forças Armadas)[119]
Computer Incident Response Capability - Army (CIRC Exercito)[119]
Computer Incident Response Capability - Navy (CIRC Marinha)[119]
Computer Incident Response Capability - Air Force (CIRC Força Aerea)[119]
Western Military District Cybersecurity Center (Западный военный округ центр киберзащиты – Zapadnyy Voyenny Okrug Tsentr Kiberzashchity)[123]
Southern Military District Cybersecurity Center (Южный военный округ центр киберзащиты – Yuzhnyy Voyenny Okrug Tsentr Kiberzashchity)[123]
Central Military District Cybersecurity Center (Центральный военный округ центр киберзащиты – Tsentral'nyy Voyenny Okrug Tsentr Kiberzashchity)[123]
Eastern Military District Cybersecurity Center (Восточный военный округ центр киберзащиты – Vostochnyy Voyenny Okrug Tsentr Kiberzashchity)[123]
Joint Strategic Command “Northern Fleet” Cybersecurity Center (Объединённое стратегическое командование “Северный флот” центр киберзащиты - Ob"yedinonnoye Strategicheskoye Komandovaniye “Severnyy flot” Tsentr Kiberzashchity)[123]
Special Development Center of the Ministry of Defense (Центр специальных разработок Министерства обороны - Tsentr Spetsial'nykh Razrabotok Ministerstva Oborony)[124]
6th Directorate - General Directorate of the General Staff (Шестое Управление-Главное управление Генерального штаба - Shestoye Upravleniye-Glavnoye Upravleniye General'nogo Shtaba)[125]
85th Special Service Main Center – Military Unit 26165 (85-й главный центр специальной службы-Военная часть 26165 - 85-y Glavnyy Tsentr Spetsial'noy Sluzhby-Voyennaya Chast' 26165)[126]) [127]
Special Technologies Main Center – Military Unit 74455 (Главный центр специальных технологий-Военная часть 74455 - Glavnyy Tsentr Spetsial'nykh Tekhnologiy-Voyennaya Chast' 74455)[128]
^AKA 563rd Unit, conducts operations against populations in territories occupied by the KPA, assesses reactionaries, and seeks out KPA supporters.[84]
^According to others, Unit 204 may be under: KWP United Front Department’s Operations Bureau,[81] Enemy Operations Department,[80][a] or Unification Bureau’s Operations Department[85]
^cyber psychological and information warfare operations,[81][85] using phishing e-mails against the Korean military,[80] and research.[85]
^AKA General Staffs Electronic Warfare Department, responsible for military communications, system penetration programs, and electronic warfare operations, composed of two brigade-level electronic warfare units with 600 staff members each, one in Sangwön, South P'yöng'an Province and one in Nampo City[80][81][83]
^RGB; 정찰총국; military spy agency controlled by the regime’s Defense Ministry[86][85] and North Korea’s primary (foreign-)intelligence bureau/agency.[87][88]
^collects intelligence and conducts offensive cyber operations penetrating adversary networks and infecting networks with malware[85]
^Cyber attack unit[80] / headquarters of North Korea’s hacking operations[86][85] in Mangkyungdae district of Pyongyang.[85]
^
abcdePark, Donghui (2019).
"3.5 North Korea's Cyber Proxy Warfare Strategy"(PDF). North Korea's Cyber Proxy Warfare: Origins, Strategy, and Regional Security Dynamics (PhD). University of Washington. pp. 137–150.
^
abcdefgHealthcare Sector Cybersecurity Coordination Center, (HC3) (2021).
"North Korean Cyber Activity"(PDF). U.S. Department of Health & Human Services.{{
cite web}}: CS1 maint: numeric names: authors list (
link)
Many countries around the world maintain military units that are specifically trained to operate in a
cyberwarfare environment. In several cases these units act also as the national
computer emergency response team for civilian
cybersecurity threats.
Albania
Military Cyber Security Unit (Një e Sigurisë Kibernetike)[1]
Argentina
Joint Cyber Defense Command of the Armed Forces Joint Staff (Comando Conjunto de Ciberdefensa del Estado Mayor Conjunto de las Fuerzas Armadas)[2]
Cyberdefense Operations Center (Centro de Operaciones de Ciberdefensa)[2]
Cyberdefense Engineering Center (Centro de Ingenieria de Ciberdefensa)[2]
Security Operations Intelligent Center (Centro Inteligente de Operaciones de Seguridad)[3]
National Cyberdefense Center (Centro Nacional de Ciberdefensa)[3]
Informatic Energencies Response Center of the Defense Ministry (Centro de Respuesta ante Emergencias Informáticas del Minisetrio de Defensa)[3]
Cybernetic Analysis Laboratory (Laboratorio de Análisis Cibernéticos)[3]
Information Communications Technologies and Cybersecurity Center (Informations-Kommunikations-Technologie und Cybersicherheitszentrum)[10]
Azerbaijan
Special Communication and Information Security State Service (Xüsusi Rabitə və İnformasiya Təhlükəsizliyi Dövlət Xidməti)[11]
Belarus
Information Technology Specialized Company (Специализированную роту по информационной безопасности - Spetsializirovannuyu Rotu po Informatsionnoy Bezopasnosti)[12]
Stationary Communication Information System (Стационарна Комуникационна Информационна Система - Statsionarna Komunikatsionna Informatsionna Sistema)[20]
56th Jiangan Computing Technologies Research Institute (第56江南计算技术研究所 - Dì 56 Jiāngnán Jìsuàn Jìshù Yánjiū Suǒ)[24]
57th Research Institute (第57研究所 - Dì 57 Yánjiū Suǒ)[25]
58th Research Institute (第58研究所 - Dì 58 Yánjiū Suǒ)[25]
Cyberspace Security Academy (网络空间安全学院 - Wǎngluò Kōngjiān Ānquán Xuéyuàn)[24]
China (Republic of China/“Taiwan”)
Information Communication and Electronic Warfare Command (信息和电子战司令部 - Xìnxī Hé Diànzǐ Zhàn Sīlìng Bù)[26]
Colombia
Joint Cybernetic Command (Comando Conjunto Cibernetico)[27]
National Army Cybernetic Unit (Unidad Cibernética Ejército Nacional)[27]
National Navy Cibernetic Unit (Unidad Cibernética Armada Nacional)[27]
Air Force Cybernetic Unit (Unidad Cibernética Fuerza Aérea)[27]
Communications and Cyberdefense Operational Support Command (Comando de Apoyo Operacional de Comunicaciones y Ciberdefensa)[28]
Croatia
Cybernetic Domain Command of the General Staff (Zapovjedništvo za Kibernetički Prostor Generalštaba)[29]
Cuba
Military Cyberdefense Command (Mando Militar de Ciberdefensa)[30][31]
Cyprus
Cyber Defense Command of the General Staff of National Defense (Διοίκηση Κυβερνοάμυνας του Γενικού Επιτελείου Εθνικής Άμυνας - Dioíkisi Kyvernoámynas tou Genikoú Epiteleíou Ethnikís Ámynas)[32]
Czech Republic
National Cyber Operations Centre (Národní Centrum Kybernetických Operací)[33]
Center for Cyber Security (Center for Cybersikkerhed)[35]
Dominican Republic
Armed Forces Command, Control, Communications, Computers, Cybersecurity and Intelligence Center (Centro de Comando, Control, Comunicaciones, Computadoras, Ciberseguridad e Inteligencia de las Fuerzas Armadas)[36]
Ecuador
Cyberdefense Command (Comando de Ciberdefensa)[27]
Operational Center for Land Information and Communication Systems and Cybersecurity Networks (Centre Opérationnel des Réseaux SIC (Systèmes d’Information et de Communication) Terre et de Cybersécurité)[41]
807th Signal Company (807e Compagnie de Transmission)[42]
Cyber Operations Center (Zentrum Cyber-Operationen)[51]
Greece
Cyber Defense Directorate of the General Staff of National Defense (Διεύθυνση Κυβερνοάμυνας του Γενικού Επιτελείου Εθνικής Άμυνας - Diéfthynsi Kyvernoámynas tou Genikoú Epiteleíou Ethnikís Ámynas)[52]
Guatemala
Computing and Technology Command (Comando de Informática y Tecnología)[53]
Hungary
Cyber Defense Center - Military National Security Service (Kibervédelmi Központ - Katonai Nemzetbiztonsági Szolgálat)[54]
6th Technical Bureau of the Reconnaissance General Bureau[89][86]
Bureau/
Lab 110 / 110 Institute (Technology Reconnaissance Team, conducts computer network operations against military units and strategic organizations.[86][80])
3rd Bureau of the RGB (AKA 3rd Technical Surveillance Bureau, responsible for North Korea's cyber operations)[87]
The Data Investigation Examination Office (conducts cyber espionage to collect intelligence on politics, economics, and societies abroad)[80]
KWP's Unification and United Front Department (cyber influence operations through social media and websites such as Uriminzokkiri, which is maintained by the party's Committee for the Peaceful Reunification of the Fatherland.[80])
The State Security Department's (secret police) communications monitoring and computer hacking group conducts cyber warfare, presumably in support of its mission of internal state security.[81][80]
Korea (Republic of Korea/“South Korea”)
Cyber Operations Command (사이버 작전 사령부 - Saibeo Jagjeon Salyeongbu)[92]
Cyber Defense Computer Information Services (CIS) Regiment (Cyberforsvarets CIS-regiment) [111]
Cyber Security Center (Cybersikkerhetssenteret) [111]
Cyber Defense Weapons School (Cyberforsvarets Våpenskole) [111]
Cyber Defense Information and Communication Technologies (ICT) Service (Cyberforsvarets IKT-tjenester) [111]
Cyber Defense Base and Alarm Service (Cyberforsvarets Base- og Alarmtjenester) [111]
Paraguay
General Directorate of Information and Communication Technologies of the Armed Forces (Dirección General de Tecnologías de la Información y Comunicación de las Fuerzas Armadas)[112]
Peru
Cyberdefense Operational Command (Comando Operacional de Ciberdefensa)[113]
Cybernetic Operations Center (Centrum Operacji Cybernetycznych)[115]
National Center for Cyberspace Security (Narodowe Centrum Bezpieczeństwa Cyberprzestrzeni)[116]
Defense Ministry Coordination Center for Computer Incident Response - Military Counterintelligence Service (Centrum Koordynacyjnego Systemu Reagowania na Incydenty Komputerowe Obrony Narodowej - Służba Kontrwywiadu Wojskowego)[117]
Cyberspace Defense Forces (Wojska Obrony Cyberprzestrzeni)[118]
Portugal
Cyberdefense Center - Armed Forces General Staff (Centro de Ciberdefesa – Estado Maior General das Forças Armadas)[119]
Computer Incident Response Capability - Army (CIRC Exercito)[119]
Computer Incident Response Capability - Navy (CIRC Marinha)[119]
Computer Incident Response Capability - Air Force (CIRC Força Aerea)[119]
Western Military District Cybersecurity Center (Западный военный округ центр киберзащиты – Zapadnyy Voyenny Okrug Tsentr Kiberzashchity)[123]
Southern Military District Cybersecurity Center (Южный военный округ центр киберзащиты – Yuzhnyy Voyenny Okrug Tsentr Kiberzashchity)[123]
Central Military District Cybersecurity Center (Центральный военный округ центр киберзащиты – Tsentral'nyy Voyenny Okrug Tsentr Kiberzashchity)[123]
Eastern Military District Cybersecurity Center (Восточный военный округ центр киберзащиты – Vostochnyy Voyenny Okrug Tsentr Kiberzashchity)[123]
Joint Strategic Command “Northern Fleet” Cybersecurity Center (Объединённое стратегическое командование “Северный флот” центр киберзащиты - Ob"yedinonnoye Strategicheskoye Komandovaniye “Severnyy flot” Tsentr Kiberzashchity)[123]
Special Development Center of the Ministry of Defense (Центр специальных разработок Министерства обороны - Tsentr Spetsial'nykh Razrabotok Ministerstva Oborony)[124]
6th Directorate - General Directorate of the General Staff (Шестое Управление-Главное управление Генерального штаба - Shestoye Upravleniye-Glavnoye Upravleniye General'nogo Shtaba)[125]
85th Special Service Main Center – Military Unit 26165 (85-й главный центр специальной службы-Военная часть 26165 - 85-y Glavnyy Tsentr Spetsial'noy Sluzhby-Voyennaya Chast' 26165)[126]) [127]
Special Technologies Main Center – Military Unit 74455 (Главный центр специальных технологий-Военная часть 74455 - Glavnyy Tsentr Spetsial'nykh Tekhnologiy-Voyennaya Chast' 74455)[128]
^AKA 563rd Unit, conducts operations against populations in territories occupied by the KPA, assesses reactionaries, and seeks out KPA supporters.[84]
^According to others, Unit 204 may be under: KWP United Front Department’s Operations Bureau,[81] Enemy Operations Department,[80][a] or Unification Bureau’s Operations Department[85]
^cyber psychological and information warfare operations,[81][85] using phishing e-mails against the Korean military,[80] and research.[85]
^AKA General Staffs Electronic Warfare Department, responsible for military communications, system penetration programs, and electronic warfare operations, composed of two brigade-level electronic warfare units with 600 staff members each, one in Sangwön, South P'yöng'an Province and one in Nampo City[80][81][83]
^RGB; 정찰총국; military spy agency controlled by the regime’s Defense Ministry[86][85] and North Korea’s primary (foreign-)intelligence bureau/agency.[87][88]
^collects intelligence and conducts offensive cyber operations penetrating adversary networks and infecting networks with malware[85]
^Cyber attack unit[80] / headquarters of North Korea’s hacking operations[86][85] in Mangkyungdae district of Pyongyang.[85]
^
abcdePark, Donghui (2019).
"3.5 North Korea's Cyber Proxy Warfare Strategy"(PDF). North Korea's Cyber Proxy Warfare: Origins, Strategy, and Regional Security Dynamics (PhD). University of Washington. pp. 137–150.
^
abcdefgHealthcare Sector Cybersecurity Coordination Center, (HC3) (2021).
"North Korean Cyber Activity"(PDF). U.S. Department of Health & Human Services.{{
cite web}}: CS1 maint: numeric names: authors list (
link)