Hybrid threats describe a strategy in which a state or non-state actor blends conventional, irregular, cyber, informational, diplomatic, and economic instruments to achieve political objectives while remaining below the threshold that would trigger a clear military response. The concept became prominent in Western strategic discourse after Russia's 2014 annexation of Crimea and operations in eastern Ukraine, which combined unmarked troops ("little green men"), cyber operations, propaganda, and energy leverage.
Although there is no single agreed legal definition, the European Union and NATO converged on working definitions in the mid-2010s. The European Commission's 2016 Joint Framework on countering hybrid threats (JOIN(2016) 18) characterises them as a "mixture of coercive and subversive activity, conventional and unconventional methods" used by state or non-state actors in a coordinated manner. NATO endorsed a strategy on countering hybrid warfare at the 2015 Wales follow-up and the 2016 Warsaw Summit, and Article 5 was formally clarified to potentially apply to hybrid attacks.
Typical instruments include:
- Disinformation and influence operations through state-aligned media and social platforms.
- Cyber operations against critical infrastructure, electoral systems, or government networks.
- Economic coercion, such as targeted sanctions, trade restrictions, or energy supply manipulation.
- Weaponised migration, as alleged at the Belarus–Poland border in 2021.
- Proxy forces and deniable military activity.
The defining feature is ambiguity: each individual action may be deniable or fall short of armed attack under Article 2(4) of the UN Charter, complicating attribution and collective response. To address this, the EU established the Hybrid Fusion Cell within the EU Intelligence and Situation Centre (INTCEN) in 2016, and the European Centre of Excellence for Countering Hybrid Threats opened in Helsinki in 2017, with both EU and NATO participation.
Critics note the term risks becoming a catch-all that obscures specific phenomena like espionage or subversion, each of which has its own established analytical and legal frameworks.
Example
In 2021, EU member states accused Belarus of orchestrating a hybrid threat by channelling migrants toward the Polish, Lithuanian, and Latvian borders in retaliation for sanctions.
Frequently asked questions
Conventional warfare involves overt armed force between recognised militaries; hybrid threats deliberately stay below that threshold, blending deniable, non-military tools with limited or covert force to avoid triggering treaty obligations like NATO's Article 5.
Keep learning