The North Atlantic Treaty Organization is preparing for cyberwarfare.
Author: Ali Askari, analyst, especially for Sangar
An intensification of confrontation among major international players is being observed in the information space. Such actions are taking on increasingly aggressive forms, especially on the part of the countries of the collective West. In 2025, under conditions close to real ones, the North Atlantic Alliance implemented scenarios that included not only defensive but also offensive actions.
From November 28 to December 4, 2025, the United States, at the facilities of the Cooperative Cyber Defence Centre (Tallinn, Estonia), conducted another round of joint cyber exercises, Cyber Coalition 2025, together with twenty-nine NATO allies, seven partner countries, and the European Union. The exercise was led by the command of the U.S. 16th Air Force. As part of the event, advanced methods of delivering cyber strikes against critical infrastructure, government networks, communication systems, satellites, space systems, and auxiliary infrastructure of a potential adversary were practiced.
Further evidence of the intensification of the North Atlantic Alliance’s destructive activities in cyberspace can be seen in the agreements reached by the leaders of NATO member states during a videoconference held on October 9, 2025. In particular, the participants unanimously agreed on the need to pool efforts in this field through the establishment of additional cyber centers (the NATO Integrated Cyber Defence Centre) and to ensure continuous real-time information exchange among authorized specialized agencies of Western countries.
In his address, NATO Secretary General Mark Rutte stated that the alliance’s members are also increasing their investments in cyber defense. In addition, experts discussed the possibility of the North Atlantic Alliance applying so-called proactive cyber measures against unfriendly states, which indicates NATO’s ability, if necessary, to initiate a “cyber offensive” in foreign information spaces.
Another example of the West’s destructive activities in cyberspace is the series of attacks carried out against China’s infrastructure between 2022 and 2024. On October 19, 2025, China’s Ministry of State Security accused the U.S. National Security Agency of hacking the National Time Service Center (Xi’an) and stealing data, which, according to the Chinese authorities, was used to monitor mobile devices of employees and the center’s network systems.
The implantation of malicious software by U.S. intelligence services led to disruptions in communications, financial and transportation systems, power supply, as well as computer servers of defense research institutes in Heilongjiang Province.
