Inside Russia's Most Elite Hacking Unit 😳
The transcript discusses the SolarWinds supply chain attack, where Russian SVR operatives embedded backdoors into SolarWinds software updates that were downloaded by 18,042 companies. Rather than causing widespread damage, the attackers conducted precision espionage targeting approximately 50 US government agencies, demonstrating sophisticated and selective operational security.
Summary
The speaker describes a cyber operation attributed to Russia's special operations unit involving SolarWinds, a widely-used infrastructure management software. The attack involved implanting malicious code directly into SolarWinds' published software updates, which the speaker compares to compromising Microsoft—a scenario where millions would unknowingly download backdoored software. Specifically, 18,042 companies downloaded the compromised version containing the backdoor. The speaker notes that the Russian SVR, despite having the capability to cause catastrophic damage across all affected organizations, chose instead to conduct highly selective and precision-based espionage operations. Rather than a indiscriminate attack ('spray and pray'), the operation was characterized as a 'sniper shot'—carefully targeting approximately 50 US government agencies to steal specific information. The speaker emphasizes that this demonstrates sophisticated real espionage tradecraft rather than destructive cyber warfare.
Key Insights
- An implant was discovered in SolarWinds' published code, which the speaker compares to compromising Microsoft—creating a scenario where a signed update from a trusted vendor becomes a backdoor for SVR email theft
- 18,042 companies downloaded the new version containing the Russian backdoor, giving SVR operators a menu of potential targets to select from
- The Russian SVR possessed the capability to shut down and delete everything across all affected organizations but deliberately chose not to do so
- The operation was conducted as precision-based real espionage—a 'sniper shot' rather than indiscriminate destruction, demonstrating sophisticated targeting discipline
- The Russian SVR specifically targeted approximately 50 US government agencies, selecting only what they wanted rather than causing widespread damage
Topics
Transcript
[0:00] You describe this as a special operations cyber [music] unit. >> Absolutely. Solar Winds was a company that we all use for kind of controlling our infrastructure. [music] Imagine this. I had to call them. We found an implant in their published code. That's no different than like Microsoft getting hacked. You get the [music] next update of Microsoft and it's a back door for the SVR to steal all your email. You're on your phone and you download an app and like, well, thank God I updated my app. And the update itself signed by Solowitz had a back [music] door that the Russians now had a menu of who do we want to hack today. 18,042 [0:31]…
Full transcript available for MurmurCast members
Sign Up to AccessMore from Shawn Ryan Show
China Hacked 37 Military Bases 😳
A Pentagon computer security official describes discovering Chinese hackers accessing U.S. military networks in the 1990s, including intrusions into approximately 37 military installations across multiple branches using credentials from a Chinese foreign national's university account.
This App Makes You Disappear Off the Internet 🤯
The video demonstrates how websites collect extensive tracking data through cookies even when users decline them, and presents Glacier, a privacy app that uses burner phone numbers, VPNs, and secure DNS to help users disappear from the internet. The creators recommend using iOS devices as the most privacy-conscious platform choice.
Kevin Mandia - The Man Who Exposed China's Military Hackers | SRS #328
Kevin Mandia, a legendary cybersecurity expert and founder of Mandiant, discusses his 30+ year career tracking nation-state hackers, exposing China's PLA Unit 61398, responding to major breaches like SolarWinds and Colonial Pipeline, and his new AI-powered offensive security company Armadin designed to stay ahead of cyber threats.
Sniper Makes a 2,345 Yard Shot?! 🤯
A sniper recounts making an extremely long-distance shot at 2,345 yards against a target on a motorcycle during an operation. After an initial miss by another sniper, the speaker fired five shots, with the fifth round successfully hitting the motorcycle and its rider, passing through the front leg, the bike, the back leg, and detonating on the far side.
Why Native Americans Are Terrified of Skinwalkers 😳
A skinwalker is described as a shape-shifting demonic entity from Native American folklore—a witch or warlock who trades their soul for immortality and the ability to transform into animals like wolves. The topic is culturally sensitive within Native American communities, particularly in the Uinta Basin, where skinwalkers are considered as real as physical objects.