That is precisely what the NATO document in question is specifying.

However, they also include civilian 'hacktivists' who engage in cyber attacks against an enemy state during existing armed conflict.

[edit: clarify civilian angle]