Cyber Capabilities of Terrorist Organizations
Cyber Capabilities of Terrorist Organizations

Summary/Abstract: This paper provides a structured analysis of the cyber capabilities of terrorist organizations through a multi-phase framework—enabling, disruptive, and destructive capacities—adapted from the Cambridge Centre for Risk Studies. Drawing on institutional definitions and theoretical models of cyberterrorism, the study underscores the definitional ambiguities and attribution challenges that complicate threat assessment. The research documents how terrorist organizations leverage the internet primarily for enabling functions such as encrypted communication, propaganda dissemination, recruitment, and financial transactions, often exploiting both open web and anonymized darknet infrastructures. Although instances of disruptive operations (e.g., DDoS attacks, defacements, data breaches) have emerged, these remain technically unsophisticated and rare. No verifiable incidents of destructive cyberterrorism—those involving SCADA or ICS-level attacks—have yet been in the range of terrorist actors. The study concludes by identifying future pathways for terrorist cyber escalation exploring Cybercrime-as-a-Service (CaaS), radicalization of technically skilled lone-wolf actors, and the experimental adoption of AI and decentralized platforms. Finally delineates a possible yet non-imminent evolution in threat vectors.

• Details
• Contents