And both destroyed files: Paul Rascagneres and Martin Lee, “Who Wasn’t Responsible for Olympic Destroyer?” Talos (blog), Feb. 26, 2018, blog.talosintelligence.com, archived at bit.ly/2UuAyDs.
The company also traced: Jay Rosenberg, “2018 Winter Cyber Olympics: Code Similarities with Cyber Attacks in Pyeongchang,” Cybersecurity DNA (blog), Feb. 12, 2018, www.intezer.com, archived at bit.ly/2WvQFCD.
Both APT3 and APT10 had been named: “Advanced Persistent Threat Groups: Who’s Who of Cyber Threat Actors,” FireEye, www.fireeye.com, archived at bit.ly/2MG27qI.
“Russian Spies Hacked the Olympics”: Ellen Nakashima, “Russian Spies Hacked the Olympics and Tried to Make It Look Like North Korea Did It, U.S. Officials Say,” Washington Post, Feb. 24, 2018, www.washingtonpost.com/.
The metadata: Kaspersky GReAT Team, “OlympicDestroyer Is Here to Trick the Industry,” SecureList blog, March 8, 2018, securelist.com, archived at bit.ly/2GcHdhR.
“It’s a completely verifiable false flag”: Kaspersky Lab, “Surprise Keynote,” YouTube, April 2, 2018, www.youtube.com.
CHAPTER 37 THE TOWER
On July 14: Indictment, Case 1:18-cr-00215-ABJ, U.S. Department of Justice, July 13, 2018, www.justice.gov.
In his photograph: “Aleksandr Vladimirovich Osadchuk,” Most Wanted, FBI website, www.fbi.gov.
On the website of a: “Investigative Report: On the Trail of the 12 Indicted Russian Intelligence Officers,” Radio Free Europe/Radio Liberty, July 19, 2018, www.rferl.org.
His light blue eyes stared: “Aleksey Aleksandrovich Potemkin,” Most Wanted, FBI website, www.fbi.gov.
Kovalev, accused of the hands-on: “Anatoliy Sergeyevich Kovalev,” Most Wanted, FBI website, www.fbi.gov.
He’d noted his affiliation: Kevin Poulsen, “This Hacker Party Is Ground Zero for Russia’s Cyberspies,” Daily Beast, Aug. 3, 2018. www.dailybeast.com.
CHAPTER 39 THE ELEPHANT AND THE INSURGENT
“Our message is clear”: “Reckless Campaign of Cyber Attacks by Russian Military Intelligence Service Exposed,” National Cyber Security Centre website, Oct. 4, 2018, www.ncsc.gov.uk.
Around the same time: Anton Cherepanov and Robert Lipovsky, “GreyEnergy: Updated Arsenal of One of the Most Dangerous Threat Actors,” We Live Security (ESET blog), Oct. 17, 2018, welivesecurity.com, archived at bit.ly/2D5atDU; and Kaspersky ICS-CERT, “GreyEnergy’s Overlap with Zebrocy,” SecureList (blog), Jan. 24, 2019, securelist.com, archived at bit.ly/2DdFEwK.
And even with its outsized spending: Armedforces.eu, “Compare Armed Forces: Military Power of USA and Russia,” armedforces.eu/.
CHAPTER 40 GENEVA
“It was here in Geneva in 1949”: “Brad Smith Takes His Call for a Digital Geneva Convention to the United Nations,” Official Microsoft Blog, Nov. 9, 2017, blogs.microsoft.com, archived at bit.ly/2t0Ft3c.
Clarke’s imagined treaty: Clarke and Knake, Cyber War (New York: HarperCollins, 2010), 242.
In 2017, Trump announced: David Sanger, “Pentagon Puts Cyberwarriors on the Offensive, Increasing the Risk of Conflict,” New York Times, June 17, 2018, www.nytimes.com.
Three months later: Dustin Volz, “Trump, Seeking to Relax Rules on U.S. Cyberattacks, Reverses Obama Directive,” Wall Street Journal, Aug. 15, 2018, www.wsj.com.
“As a deterrent against attacks”: Daniel White, “Read Donald Trump’s Remarks to a Veterans Group,” Time, Oct. 3, 2016, time.com.
CHAPTER 41 BLACK START
“While we were cleaning things up”: Lily Hay Newman, “The Hail Mary Plan to Restart a Hacked US Electric Grid,” Wired, Nov. 14, 2018, www.wired.com.
Hackers of unknown origin: Blake Sobczak, “The Inside Story of the World’s Most Dangerous Malware,” E&E News, March 7, 2019, https://www.eenews.net.
CHAPTER 42 RESILIENCE
Geer made a case for examining: Daniel E. Geer Jr., “A Rubicon,” National Security, Technology, and Law, Feb. 5, 2018, www.hoover.org.
EPILOGUE
Even so, less than half a mile: Lily Hyde, “A Bakery in a War Zone,” Roads and Kingdoms, Oct. 6, 2017, https://roadsandkingdoms.com.
APPENDIX SANDWORM’S CONNECTION TO FRENCH ELECTION HACKING
ESET had found: Anton Cherepanov, “TeleBots Are Back: Supply Chain Attacks Against Ukraine,” We Live Security (ESET blog), June 30, 2017, www.welivesecurity.com, archived at bit.ly/2UEDQEo.
BIBLIOGRAPHY
Applebaum, Anne. Red Famine. New York: Doubleday, 2017.
Clarke, Richard, and Robert Knake. Cyber War. New York: HarperCollins, 2010.
Hart, John Limond. The CIA’s Russians. Annapolis, Md.: Naval Institute Press, 2003.
Herbert, Frank. Dune. Annotated reprint, New York: Penguin, 2005. Originally published Philadelphia: Chilton Books, 1965.
Kaplan, Fred. Dark Territory. New York: Simon & Schuster, 2016.
Lunev, Stanislav. Through the Eyes of the Enemy. With Ira Winkler. Washington, D.C.: Regnery, 1998.
Plokhy, Serhii. The Gates of Europe. New York: Basic Books, 2015.
Reid, Anna. Borderland. New York: Basic Books, 1997.
Rid, Thomas. Rise of the Machines. New York: W. W. Norton, 2016.
Sanger, David. Confront and Conceal. New York: Crown, 2012.
Schecter, Jerrold L., and Peter S. Deriabin. The Spy Who Saved the World. New York: Macmillan, 1992.
Stoll, Clifford. The Cuckoo’s Egg. New York: Pocket Books, 1990.
Suvorov, Viktor. Inside the Aquarium. New York: Macmillan, 1986.
———. Inside Soviet Military Intelligence. New York: Macmillan, 1984.
Zetter, Kim. Countdown to Zero Day. New York: Crown, 2014.
ABOUT THE AUTHOR
Andy Greenberg is an award-winning senior writer for Wired magazine, where he covers security, privacy, information freedom, and hacker culture. He is the author of the 2012 book This Machine Kills Secrets, and his stories for Wired on Ukraine’s cyberwar (including an excerpt from Sandworm) have won a Gerald Loeb Award for International Reporting and two Deadline Club Awards from the New York Society of Professional Journalists. He lives in Brooklyn with his wife, documentary filmmaker Malika Zouhali-Worrall.
What’s next on
your reading list?
Discover your next
great read!
Get personalized book picks and up-to-date news about this author.
Sign up now.
Sandworm Page 36
