US military launches cyber attacks on ISIS in Mosul, openly announces it probably for the first time
US military launches cyber attacks on ISIS in Mosul, and announces it — Secretary of defense reveals cyber attacks in advance of ground battle for city.
Context & Ripple Effects
This is the moment US offensive cyber stopped being a strictly deniable instrument: the Pentagon announced cyber attacks on ISIS in Mosul before the ground battle began, treating disclosure itself as part of the operation. Months later the effort was institutionalized when the Department of Defense acknowledged it had stood up Joint Task Force Ares, a dedicated unit built to develop weapons targeting ISIS.
The arc that follows confirms this wasn't a one-off: by 2019 the campaign against ISIS's media operations was described as the largest and longest offensive cyber operation in US military history, and Cyber Command has since gone public about operations against ransomware groups and in support of Ukraine.
First-order effects
- ISIS's communications and propaganda infrastructure around Mosul comes under direct attack in advance of the ground battle, degrading the group's ability to coordinate and broadcast during the fight.
- By announcing the operation, the Pentagon accepts losing surprise in exchange for deterrence signaling — telling ISIS and other adversaries that cyber is now an openly declared battlefield instrument.
Second-order effects
- The Defense Department formalizes the ad hoc effort into standing structure, creating Joint Task Force Ares within months to develop offensive cyber weapons aimed at ISIS rather than running one-off operations.
- ISIS adapts by dispersing off platforms it can't hold — shifting recruitment and coordination to consumer chat apps like RocketChat, Viber, and Discord, and moving propaganda off YouTube after its crackdowns — forcing the military to chase targets across an expanding surface.
Third-order effects
- Publicly acknowledged offensive cyber becomes normalized doctrine: the 2018 DOD Cyber Strategy authorizes hacking to defend election systems and the energy grid, and Cyber Command later discloses operations against ransomware groups and in support of Ukraine — each disclosure lowering the threshold for the next.
- If the pattern holds, adversaries' migration to commercial chat and platform ecosystems pulls private companies into state conflict as either targets or chokepoints, making platform moderation decisions part of national security outcomes.
The trend: US military cyber operations are shifting from covert tools to openly acknowledged instruments of policy, with each public disclosure — Mosul, ransomware groups, Ukraine — setting the precedent for the next.