America quietly deploys cyber operators to Ukraine
A new warfighting force is being created, one just like JSOC
The Pentagon has quietly deployed clandestine military cyber teams to Ukraine to assist Kyiv in defending its networks against Russian attack. The teams, part of the Cyber National Mission Force, work with its Ukrainian counterparts on the ground to identify and thwart Russian hacking, bringing unique tools and expertise to the country.
Officially, the United States withdrew the cyber teams from Ukraine before the Russian invasion last February, but intelligence officials tell me that the teams have continued to operate in country, in the region, and back at home to assist Kyiv. This includes daily interactions to warn of Russian probes and attacks.
I don’t want to turn this newsletter into media criticism, but the New York Times coverage of the Cyber Mission Force and Ukraine tepidly says: “all U.S. troops were withdrawn from the country before the Russian invasion.”
The Cyber Nation Mission Force is part of U.S. Cyber Command, responsible for both defensive and offensive missions, mostly working clandestinely on everything from election security to fighting ISIS. “Cyber National Mission Force (CNMF) plans, directs, and synchronizes full-spectrum cyberspace operations to deter, disrupt, and if necessary, defeat adversary cyber actors,” the official description says.
The Force is analogous to the Joint Special Operations Command (JSOC), which is made up of the famous Army Delta force and the Navy SEAL Team 6. JSOC itself is often called the “National Mission Force” because it is used to undertake unique missions at the behest of the President.
On October 25, Secretary of Defense Lloyd Austin formally designated the CNMF as a “subordinate unified command” of Cyber Command, granting it similar global warfighting authorities to JSOC. Originally established in January 2014, the CNMF is currently made up of 39 teams in six numbered task forces of three types: defensive, offensive, and information operations.
(Again the New York Times missed the meat of the story, reporting that the designation was “a symbolic move.”)
The Cyber National Mission Force includes over 2,000 military personnel from all services, the Coast Guard, and Space Force; as well government civilians employed by CYBERCOM, the DIA, and NSA. Hundreds of more highly skilled defense contractors augment and support the Force. It is commanded by Army Maj. Gen. William J. Hartman, a career intelligence officer.
Monday, the CNMF had an establishment ceremony at Ft. Meade, Maryland to mark its elevation. “What this designation is really about is the maturity of the Cyber National Mission Force as a forward-looking organization to defend the nation,” Hartman said.
“This command is so special because they’ve always been on the cutting-edge in terms of the operations we’ve conducted,” Gen. Paul Nakasone said as he officiated at the ceremony. “This is the command within U.S. Cyber Command that has always taken that first step forward.” Nakasone is Hartman’s boss and is “dual-hatted” as commander of CYBERCOM and director of the National Security Agency. NSA is a part of the intelligence community and as such, collects intelligence, is responsible for U.S. government codes, and works on cyber security. Though the NSA is engaged in clandestine work, offensive combat takes place as part of or through CYBERCOM, a military warfighting command. Covert action, that is, offensive action that is not part of a military campaign, takes place with the CIA. The CNMF also has formal relations with the FBI and DHS.
CYBERCOM was originally set up in 2010 as a subordinate command of U.S. Strategic Command (STRATCOM) until it was elevated to unified command status (like STRATCOM) and reached “full operational capability” in 2018.
Though much of its work takes place at keyboards in the United States, like JSOC, the Force deploys “hunt forward” teams in support of regional commands (for example, European Command) for special missions. In the past four years, CYBERCOM says it deployed teams 38 times to some 21 countries. As part of missions in support of the Ukraine war, the CNMF also deployed teams to two Baltic nations – Estonia and Lithuania. Teams have also forward deployed to Croatia, Montenegro, and North Macedonia.