New Key Offensive Cyber Player: Germany

This post is also available in: עברית (Hebrew)

A special cyber security unit of the German Armed Forces (Bundeswehr) conducted its first offensive cyber operation abroad when it broke into an internal network of an Afghan mobile operator while assisting in a hostage release operation.

The German military’s cyber operation took place in autumn last year, after an employee in the Kabul office of the German Association for International Cooperation (GIZ), was kidnapped on August 17, 2015.

German authorities started to negotiate the hostage’s release with the kidnappers. The CNO was tasked by the German crisis staff with monitoring the kidnappers’ phone conversations and pinpointing their location to ensure that they intended to comply with the negotiated deal.

The hostage was successfully released via the negotiations two months later, after Germany paid a ransom. However, the involvement of the Bunderswehr’s cyber unit in the operation officially remains confidential. The German Defense Ministry refused to comment on the issue at Der Spiegel’s request, even one year after the operation, the media outlet reports.

The ministry’s spokesman also refused to confirm the operation, citing “operative security concerns,” adding that the ministry informed all “relevant committees” of the Bundestag (the lower house of the German parliament) about the issue, n24.de reports.

The media outlet adds that the German government generally considers the use of cyber-attacks in Afghanistan to be justified as its Afghan mandate envisages the right to use “any military force” to protect German citizens in the country.

At the same time, according to rt.com,  some experts raised objections to such moves. Aggressive actions are not only banned under international law, but could also set a dangerous precedent that could be used by other states willing to take similar action, security expert Alexander Neu told n24.de.

In 2015, the Defense Ministry also issued a new strategy paper that reportedly envisaged tasks for cyber security units that go beyond providing protection for the German military infrastructure and involve offensive operations.