Nation-state operations // state actors // syscfg.sh
Nation-stateoperations
Espionage, sabotage and pre-positioning by state actors. From Moonlight Maze to Volt Typhoon, with attribution handled honestly.
Operations laid out plainly: what was taken or broken, how it was attributed, and what each one changed about the game.
// operationstheatreAPT
The track log
what's on file13field reports in this track
73minutes end to end
2024–2025span of events covered
13/13reports with checked sources
Latest in this track
newest firstMoonlight Maze: The 1996 Russian Pentagon Hack That Started It All - and Its DNA in Modern Turla Malware
From 1996-1999, Russian attackers systematically looted Pentagon, NASA, and DOE networks using stepping-stone Unix…
Open report →Marriott/Starwood: The Chinese Intelligence Operation Hidden in a Hotel Loyalty Database
When Marriott acquired Starwood in 2016, it inherited an active Chinese intelligence operation that had been running…
Open report →DigiNotar: How Iran Compromised a Certificate Authority to Spy on 300,000 Users
In 2011, Iranian state actors compromised DigiNotar - a trusted Dutch certificate authority - and issued 531…
Open report →The full archive
13 reports // search the stacks13 of 13 reports
01Moonlight Maze: The 1996 Russian Pentagon Hack That Started It All - and Its DNA in Modern Turla Malware→02Marriott/Starwood: The Chinese Intelligence Operation Hidden in a Hotel Loyalty Database→03DigiNotar: How Iran Compromised a Certificate Authority to Spy on 300,000 Users→04Turla/Snake: Russia's FSB Malware That Has Run Undetected for 20 Years→05APT41 / Double Dragon: China's Threat Actor That Does Both Espionage and Cybercrime→06Lazarus Group's Crypto Heists: $625M Ronin Hack and North Korea's Blockchain Revenue Stream→07Operation Dark Seoul: North Korea's Simultaneous Wiper Attack on Three Banks and Three TV Stations→08Vault 7: When WikiLeaks Published the CIA's Entire Hacking Toolkit and a Spy Went to Prison for 40 Years→09Triton: The Russian Malware Designed to Disable Safety Systems and Allow Industrial Explosions→10GhostNet: The Chinese Espionage Network That Compromised 1,295 Computers in 103 Countries and Could Watch Through Your Webcam→11APT10 Cloud Hopper: How China Compromised 45 MSPs to Reach Hundreds of Their Clients Simultaneously→12Georgia 2008: The First Cyberattacks Synchronized with a Conventional Military Invasion→13The 2007 Estonian Cyberattacks: The First Nation-State DDoS Campaign and the Birth of NATO Cyber Defence→
Track console
shell // guest sessionguest@SYSCFG-NATIONSTAT--:--:--
track online // 13 reports indexed
type help, or random.
Try help, random, latest, grep <term>, or count.