The Cyber Threat Against Denmark

The 2024 edition of The cyber threat against Denmark emphasizes that Denmark is still a prime target for malicious actors. In early June 2024, the CFCS raised the threat level for destructive cyber attacks from LOW to MEDIUM. The decision to raise the threat level was based on Russia’s increased willingness to use hybrid tactics, including destructive cyber attacks, against European NATO member states, emphasizing the fact that an unstable global security situation also expands into the cyber domain.

The threat landscape is constantly evolving. New threat actors emerge while others disappear, and hackers continue to develop new approaches of attack. Below is an outline of the five types of cyber threats the CFCS divides the cyber threat into.

The threat of cyber espionage against Denmark is VERY HIGH. Foreign states continually conduct cyber espionage attempts against organizations in Denmark. They have done so for a number of years and will continue to do so.

Just like the threat of cyber espionage, the threat of cyber crime is VERY HIGH. Cyber crime is among the most prevalent threats and can affect individual citizens, public authorities and private companies alike, irrespective of size and critical function. In other words, this type of attack can affect everyone as cyber criminals are opportunistic.

The threat of cyber activism against Denmark is still HIGH. Russia’s invasion of Ukraine has unleashed a high level of cyber activism. The war in Gaza has been an additional driver which has resulted in the emergence of new cyber activist actors and triggered activity among existing actors. However, the threat of cyber activism still mainly emanates from pro-Russian cyber activists.

The threat of destructive cyber attacks against Denmark is now MEDIUM. The threat primarily emanates from Russian state-sponsored hackers but also from non-state hackers with various degrees of ties to the Russian state.

The threat of cyber terrorism against Denmark is NONE. The CFCS assesses that, at present, there are no terrorist groups with the capability or intent to conduct cyber terrorism against Denmark. Consequently, it is highly unlikely that Danish public authorities and private companies will fall victim to cyber terrorism attempts within the next two years.