The digital grenade in cyberwarfare: Neutralizing and jamming communications

By Kike Gandia · Defense & Geopolitics · 6 min read

The "digital grenade" metaphor captures the essence of cyberweapons: precise, disruptive and anonymous tools that have transformed conflict in the age of hybrid warfare. Combined with technologies for neutralizing communications, these weapons are redefining military and geopolitical strategy in a borderless cyberspace. This report examines the evolution of cyberweapons, the key actors, the technical mechanisms of attack and defense, communications jamming techniques, and the ethical and strategic implications of cyberwarfare in a hyperconnected world.

Cyberwarfare: an intangible battlefield

Spain's National Cryptologic Center (CCN) defines cyberwarfare as "coordinated actions in cyberspace intended to cause significant harm to an adversary, whether a state, an organization or a critical infrastructure." Unlike conventional conflict, it plays out in a digital domain characterized by:

Asymmetry Minimal resources, army-scale reach: Non-state actors, such as hacktivist groups (NoName057), can rival traditional armies.
Permanence Neither peace nor war: NATO (2024) describes cyberwarfare as a continuous conflict that blurs the line between peace and war.
Global reach Distance doesn't matter: A DDoS attack launched from Asia can cripple European servers in seconds.
Physical impact The bit that breaks steel: Stuxnet (2010) proved that a cyberattack can destroy physical infrastructure, such as nuclear centrifuges.

The four traits the National Cryptologic Center uses to distinguish cyberwarfare from conventional conflict.

In 2025, critical infrastructure (power grids, financial systems, transportation) forms the key nodes of cyberspace: vulnerable to attack, but also able to drive defensive innovation.

A short history of "digital grenades"

Cyberweapons emerged as strategic tools at the start of the 21st century. The 2007 DDoS attack on Estonia, attributed to pro-Russian groups, crippled banks, media outlets and government portals, marking the debut of cyberwarfare as a weapon of destabilization Hybrid Warfare: How Cyber Warfare is Transforming International Relations. Stuxnet (2010), developed by the United States and Israel, was a milestone: it physically sabotaged Iran's Natanz nuclear plant by manipulating SCADA systems Cyberweapon.

Other key examples include:

2007 — Estonia
A DDoS attack attributed to pro-Russian groups cripples banks, media outlets and government portals. It marks the debut of cyberwarfare as a weapon of destabilization.
2010 — Stuxnet
Developed by the United States and Israel, it physically sabotages the Natanz nuclear plant by manipulating SCADA systems. The first digital weapon to leave its mark on steel.
2012 — Shamoon
Attributed to Iran, it wipes data on 30,000 Saudi Aramco computers.
2016-2017 — Industroyer, Triton and NotPetya
Industroyer causes blackouts in Ukraine, Triton targets industrial safety systems and NotPetya causes $10 billion in global losses.
2023 — Volt Typhoon
Attributed to China, it compromises critical infrastructure in the United States.

Between 2010 and 2025, cyberweapons became part of hybrid conflicts such as the Russia-Ukraine war, combining cyberattacks with disinformation and military operations.

Between 2010 and 2025, cyberweapons grew steadily more sophisticated and became part of hybrid conflicts such as the Russia-Ukraine war, where they are combined with disinformation and military operations The Evolution of Cyber Operations.

Key actors in cyberwarfare

The main actors developing and using cyberweapons include:

State United States: Leads with programs such as Stuxnet and advanced cyberdefenses through DARPA.
State Russia: Combines cyberattacks with psychological warfare, as in Ukraine, using systems such as the Krasukha-4 to jam radars.
State China: Specializes in espionage and sabotage, with campaigns such as Volt Typhoon against critical infrastructure.
State North Korea: Funds its regime through cyberattacks, such as the Sony Pictures hack (2014).
State Iran: Responds to attacks such as Stuxnet with malware such as Shamoon.
Non-state Groups and criminal gangs: NoName057 and others exploit IoT botnets for DDoS attacks. Attribution remains the challenge: the anonymity of cyberspace complicates diplomatic and legal responses.

Attributing attacks remains a challenge because of the inherent anonymity of cyberspace, which complicates diplomatic and legal responses.

Technical mechanisms: cyberweapons and neutralization

"Digital grenades" and neutralization technologies span a broad range of tools designed to attack or protect critical infrastructure.

1. Cyberweapons

Malware: Stuxnet exploited vulnerabilities in Siemens PLCs, spinning centrifuges up to 1,410 Hz, outside their safe range of 1,064 Hz, while showing operators false data ([What is Cyber Warfare | Imperva]). Successors such as Triton (2017) targeted industrial safety systems, and Industroyer (2016) caused blackouts in Ukraine.
DDoS attacks: They use IoT botnets, such as Mirai, to overwhelm servers. In 2025, DDoS attacks grew by 50%, fueled by 15 billion connected devices ([Cloudflare, 2025]).
Phishing: Spear phishing, responsible for 66% of successful breaches, tricks users into handing over credentials ([Proofpoint, 2024]).
Zero-day exploitation: NotPetya used Windows vulnerabilities to spread worldwide.
AI-driven malware: Tools such as WormGPT (2023) generate custom exploits in real time ([Statista, 2025]).

$10B: in global losses caused by NotPetya (2017)
66%: of successful breaches start with spear phishing (Proofpoint, 2024)
+50%: growth in DDoS attacks in 2025 (Cloudflare)
15B: connected devices feed the botnets (Statista, 2025)

2. Neutralization and jamming technologies

Jammers Frequency jammers: They transmit across the 20 MHz to 6 GHz bands to block cellular, Wi-Fi and GPS communications. Russia's R-330ZH Zhitel jams LTE within a 30 km radius at 600 W, adjusting its interference in under 1 ms. Cognitive jammers, such as Elbit's SigmaCell, use AI to adapt to the frequencies they detect.
Defense DDoS mitigation: Firewalls and CDNs such as Cloudflare absorb the attack, although 2 Tbps attacks, like the one AWS suffered in 2020, push defenses to their limits.
Electronic warfare SIGINT, spoofing and jamming at once: The Krasukha-4 generates false targets across 1-18 GHz and disorients AESA radars at a range of 300 km. In Ukraine, the RB-341V Leer-3 uses Orlan-10 drones to extend its jamming reach.
EMP Non-nuclear electromagnetic pulses: They can disable entire urban networks. Less than 15% of Europe's critical infrastructure is protected against EMP.
Satellite Satellite interference: Dependence on networks such as Starlink exposes vulnerabilities to advanced jammers, like those used in the Black Sea to manipulate GPS.

Emerging threats in 2025

IoT botnets: 15 billion connected devices amplify DDoS attacks ([Statista, 2025]).
Satellite interference: Systems such as Russia's R-934B Sinitsa manipulate signals from low Earth orbit networks.
EMP weapons: 2024 intelligence reports warn of Russian-Chinese developments in non-nuclear EMP ([CCN, 2024]).

Geopolitical and ethical implications

Cyberweapons and neutralization technologies have profound implications for hybrid warfare:

Anonymity and deniability: The difficulty of attribution, as with the NoName057 attacks, complicates diplomatic responses and raises the risk of unintended escalation ([CSIS, 2024]).
Blurring the line between war and peace: Peacetime cyberattacks, such as those attributed to China against critical infrastructure, challenge international norms Cyberwarfare: Strategies, Threats.
Civilian impact: Jammers, such as those used at high-profile events, disrupt essential services (emergency services, civilian communications), raising ethical dilemmas governed by European Directive 2014/53/EU ([IEEE, 2024]).
Conflict escalation: EMP weapons and malware such as Industroyer could trigger global crises by disrupting critical networks, hitting economies and populations ([CCN, 2024]).
Psychological warfare: DDoS attacks, amplified by disinformation, spread panic and distrust, as in Russian campaigns against Ukraine The Future of Hybrid Warfare.

The development of EMP weapons and AI-driven malware poses existential risks, since a single attack could paralyze entire societies. The lack of robust international regulatory frameworks compounds these challenges and calls for global technology governance.

Defense and mitigation strategies

To counter "digital grenades" and jamming technologies, organizations need to take a proactive approach:

Detect Threat intelligence: SIEM systems such as Wazuh detect anomalous behavior with specific rules for identifying malware.
Train Phishing simulations: Awareness training cuts click rates by 40%.
Authenticate MFA: Only 45% of organizations use it consistently, even though it is key to mitigating credential theft.
Harden EMP protection: Shielding critical infrastructure, as with Ukrainian military systems (R-330UM Mandat-B1E), is essential.
Cooperate International collaboration: Intelligence-sharing agreements (15 signed in Europe in 2024) strengthen defenses.

The five lines of defense the report proposes, with the figure that measures each one.

The "digital grenade" symbolizes the evolution of cyberwarfare, in which cyberweapons such as Stuxnet, NotPetya and Volt Typhoon, together with neutralization technologies such as jammers and integrated electronic warfare, are redefining modern conflict. These tools, used by states such as the United States, Russia, China, North Korea and Iran, and by non-state actors such as NoName057, enable anonymous operations with devastating effects, from industrial sabotage to political destabilization.

In 2025, threats such as IoT botnets, AI-driven malware and EMP weapons demand new responses. Threat intelligence, training and international regulation are crucial to mitigating these risks. Yet the use of jammers and EMP in civilian settings raises ethical dilemmas, while the lack of clear attribution threatens to escalate conflicts. On this borderless battlefield, digital resilience and global cooperation will be key to navigating the future of hybrid warfare.

What remains unresolved. The development of EMP weapons and AI-driven malware poses existential risks: a single attack could paralyze entire societies. The lack of robust international regulatory frameworks makes the problem worse and calls for global technology governance.

Related service

Threat intelligence and analysis

Topics

#Warfare-algorithms #Communications #Asymmetric-warfare #NoName057 #cyberwarfare #defense

Keep reading

Talk to the team