Cybersecurity

Andy Greenberg is back with a deep dive into state-sponsored cyberwarfare, focusing on the Russian hacking group known as Sandworm. This group, linked to Russia’s military intelligence agency (GRU), has been responsible for some of the most destructive cyberattacks in history. The book first examines the 2015 cyberattack on Ukraine’s power grid, marking the first time hackers caused a blackout. This event signaled a new era where cyberattacks could have tangible, real-world consequences. Subsequent attacks, including the 2016 Industroyer malware and the 2017 NotPetya attack, demonstrated the escalating capabilities and ambitions of state-sponsored hackers. ...

Stuxnet, what a badass story - I can’t believe no one has made a movie about this yet. The US goverment wanted to derail Iran’s nuclear program, but diplomacy prevented them from launching a kinetic attack… sort of. Instead, the NSA writes a worm specifically targeting computers used by Iran’s nuclear program to administer Seimens control units that operate centrifuges used to produce weapons-grade uranium. By subtly altering their spin rates, Stuxnet malware caused physical degradation while simultaneously feeding false data to monitoring systems, ensuring the sabotage remained undetected for an extended period. By the time the malware was discovered, Iran’s nuclear weapons production capabilities are delayed significantly. ...

Greenberg, a seasoned cybersecurity journalist, delves into the evolution of cryptocurrency tracing, challenging the perception of Bitcoin as an untraceable medium. He narrates the efforts of investigators who, through technical acumen and persistence, exposed illicit activities on platforms like Silk Road and AlphaBay. The book highlights the pivotal role of agencies such as the IRS Criminal Investigation unit and companies like Chainalysis in these endeavors Key Ideas Debunking Anonymity: Contrary to popular belief, Greenberg illustrates how Bitcoin transactions, recorded on the blockchain, can be traced, enabling authorities to follow the digital money trail. Real-Life Investigations: The narrative covers significant cases, including the takedown of AlphaBay, a marketplace surpassing Silk Road in scale, and the operation against “Welcome to Video,” a child exploitation platform. Law Enforcement Dynamics: The book sheds light on the collaboration and sometimes competition among various agencies, and the emergence of cryptocurrency tracing as a specialized field within law enforcement.