How is cyberwar different from cybercrime?

While the terms are sometimes conflated due to the use of similar tactics, cyberwar and cybercrime are distinct concepts with different actors, motivations, and legal implications.12

Key Differences

• Actors and Intent: Cyberwar is typically waged by states or their proxies against other states, often targeting government and military networks to disrupt, destroy, or deny their use. In contrast, cybercrime is generally perpetrated by individuals or groups—often for financial gain, identity theft, or personal harm—and is viewed as a matter for law enforcement rather than the military.213
• Scope and Impact: Cyberwar involves attacks on critical national infrastructure, such as electrical grids, financial networks, or air traffic control systems, and may be considered an armed attack if attribution is proven. Cybercrime, while potentially causing significant economic damage, focuses on breaches of personal or corporate privacy, fraud, or the disruption of specific digital services.143
• Legal Framework: Cybercrime is addressed through criminal law and international treaties, such as the Council of Europe Convention on Cybercrime, which facilitates cooperation across jurisdictions. Cyberwar, however, involves complex political and military implications under the laws of armed conflict.51