Capturing the data during conflict --- Interesting thoughts, Vladimir. I see few scenarios for capturing the data of the counter-party during the conflict: - Spearphishing and tailored operations to target right higher-level officials/officers of government, companies and organisations in the other country, to penetrate into networks and steal data. This would require substantial staff and tailored TTPs. - Ransomware: Spreading ransomware to targets in the other country, and lock and/or capture the data. There is the risk of a spill-over effect to other countries, however, as it might be hard to control the (further) spread of ransomware. - Traffic capturing through changing BGP routes: Reconfiguring BGP settings of major routers in own country (such as telecom operators) to redirect Internet traffic (from the other country, especially if it is a neighboring one) through our own network, especially for espionage. This is trackable and would soon be identified, possibly disrupting wider Internet flow (in the region or beyond), risking political repercussions. It is also rather possible for big, more powerful states, that can suck more of the regional/international traffic without being immediately noticed.

Any other scenarios?

Source author: Vladimir Radunovic vladar@diplomacy.edu