The UK has conducted a major offensive cyber-campaign against the Islamic State group.
Former MI5 agent Jeremy Fleming said the operation hindered the group’s ability to co-ordinate attacks and suppressed its propaganda.
It is the first time the UK has systematically degraded an adversary’s online efforts in a military campaign.
Mr Fleming made the remarks in his first public speech as GCHQ director.
“The outcomes of these operations are wide-ranging. In 2017 there were times when Daesh [an alternative name for Islamic State] found it almost impossible to spread their hate online, to use their normal channels to spread their rhetoric, or trust their publications,” he said.
Mr Fleming said much of the cyber-operation was too sensitive to talk about, but had disrupted the group’s online activities and even destroyed equipment and networks.
“This campaign shows how targeted and effective offensive cyber can be,” he stated.
But Mr Fleming said the fight against IS was not over, because the group continued to “seek to carry out or inspire further attacks in the UK” and find new “ungoverned spaces to base their operations”.
Mr Fleming also criticised Russia over what he called unacceptable cyber-behaviour that was a growing threat to the UK and its allies.
He recalled the Not Petya ransomware attack on Ukraine last year, which eventually spread across the world.
The UK and US later said the Russian military were behind the attack a claim that Moscow denied.
“They’re not playing to the same rules, They’re blurring the boundaries between criminal and state activity,” Mr Fleming said.
He said the use of a nerve agant on Sergei and Yulia Skripal in Salisbury was stark and shocking, and demonstrated how reckless Russia is prepared to be.
The UK has said Moscow was culpable for the attack, but Russia denies any involvement.
“The robust response from the UK and from the international community shows the Kremlin that illegal acts have consequences. And it looks like our expertise on Russia will be in increasing demand,” he said.
He went on to describe some of GCHQ’s other goals, which include tracking down people who use the dark web to distribute child sex abuse images.
He said cyber has created a new landscape for attackers and defenders, and the challenges were vast but were being met by a strong and lawful GCHQ.