IntrusionsInDepth Podcast

About IntrusionsInDepth Podcast

A podcast that analyzes cyber attacks and the threat actors that conduct them. Hosted by Josh Stepp www.intrusionsindepth.com (https://www.intrusionsindepth.com?utm_medium=podcast)

Publisher

Josh Stepp

Category

history · technology

Language

en

Explicit

No

First episode

14 May 2024

Latest episode

21 Sept 2026

Latest episodes

28 episodes in the feed.

1. 

   21 Sept 2026

   013.2: Civilian-Grade WARFARE

   In Intrusions In Depth episode 13-2, Josh Stepp applies Carroll Quigley’s Weapons Systems and Political Stability to modern cyber conflict and the Belarusian Cyber Partisans. Quigley’s amateur-vs-specialist, offense-vs-defense, and shock-vs-missile framework explains why cheap, accessible tools—open-source malware, Python, Telegram, Starlink, and $300–$5,000 FPV drones—now let small civilian teams punch far above their weight against states. The episode introduces “civilian-grade warfare” and the trickle-up arsenal: commercial technology flowing up into resistance and military use rather than military tech trickling down. It contrasts historical mass amateur systems (Greek phalanx, 19th-century rifle) with today’s fragile, high-impact specialist cells (drone teams, hacktivist squads) and offers five practical tests—self-liquidation, procedural goals, capability diffusion, telluric ties, and targeting restraint—to separate authentic partisans from false-flag or factional operations. Essential listening for cybersecurity professionals, threat-intelligence analysts, and anyone tracking how AI, cheap hardware, and open-weight models are reshaping power between states and civilians. Key Topics: Belarus Cyber Partisans, Lukashenko regime, Russia-Ukraine war logistics disruption, hacktivism, cyber espionage, ransomware as political weapon, KGB leaks, civilian cyber warfare. #CyberWarfare #Belarus #Hacktivism #CyberPartisans #CyberSecurity #GeopoliticsKey Topics: * Carroll Quigley’s seven stages of civilization and his unpublished book Weapons Systems and Political Stability * Amateur vs. specialist weapons and how cost/training determine democracy vs. authoritarianism * Offense vs. defense dominance and the resulting size of political units * Shock vs. missile weapons mix and civilizational “weapons mix” * Stability as alignment between legal consensus and actual power * Civilian-grade warfare: Cyber Partisans, commoditized malware, and cheap FPV drones * The caveat of adjacent professional skills and “professionalization of the civilian” * Trickle-up arsenal (civilian tech used for war) vs. historical trickle-down military tech * The two-dimensional axis: amateur weapon + specialist wielder * Organizational shift from interchangeable mass (phalanx, rifle) to complementary specialist cells * Binary capability threshold, fragility, latency, and future AI/GPU-housed cells * Five tests to distinguish genuine specialist guardianship from state proxies or factional groups (self-liquidation, procedural ends, capability diffusion, telluric criterion, restraint) Call to Action: * Subscribe to the podcast for more episodes on high-profile cyber intrusions. * Visit intrusionsindepth.com for additional stories and insights. * Share your thoughts on social media using #IntrusionsInDepth. Links and Resources: * The Evolution of Civilizations: An Introduction to Historical Analysis by Carroll Quigley (https://link.amazon/B04mRGFLS) * Weapons Systems and Political Stability: A History by Carroll Quigley (https://link.amazon/B0eAQ84wX) * https://rsieu.com/how-fpv-drone-teams-really-work-lessons-from-ukraine-and-implications-for-european-forces/ * https://www.atlanticcouncil.org/blogs/ukrainealert/fpv-drones-in-ukraine-are-changing-modern-warfare/ * * Host: Josh Stepp * Produced by: Josh Stepp Thank you for tuning in to IntrusionsinDepth. Stay informed, stay safe, and see you in the next episode! Get full access to IntrusionsInDepth at www.intrusionsindepth.com/subscribe (https://www.intrusionsindepth.com/subscribe?utm_medium=podcast&utm_campaign=CTA_4)

2. 

   14 Jul 2026

   013.1: THE CYBER PARTISANS

   In this episode of Intrusions in Depth, host Josh Stepp dives deep into the extraordinary story of the Belarusian Cyber Partisans, ordinary IT professionals turned hacktivists who waged a digital guerrilla war against the Lukashenko regime. From their roots in Minsk’s High-Tech Park to high-stakes operations disrupting Belarusian railways during Russia’s 2022 invasion of Ukraine, this is a real-world tale of civilian-grade cyber warfare that feels ripped from a Hollywood thriller. Explore how a small group of software engineers used ransomware for political demands, leaked KGB databases, built a face-matching Telegram bot to expose officers, and crippled state infrastructure with custom malware like Vasilik and PreoutNIC. Josh breaks down their origins in the 2020 protests, ties to broader resistance movements, Western funding questions, propaganda battles, and the rise of civilian-grade warfare — where the gap between state and individual capabilities in cyberspace is closing. Key Topics: Belarus Cyber Partisans, Lukashenko regime, Russia-Ukraine war logistics disruption, hacktivism, cyber espionage, ransomware as political weapon, KGB leaks, civilian cyber warfare. #CyberWarfare #Belarus #Hacktivism #CyberPartisans #CyberSecurity #GeopoliticsKey Topics: * The making of modern partisans: How Belarus’s WWII partisan history and national identity shaped the group’s branding, and why the name “Cyber Partisans” was a powerful act of cultural inheritance rather than simple marketing. * From tech boom to crackdown: The rapid rise of Minsk’s High-Tech Park (home to Viber, World of Tanks, PandaDoc, etc.) as a state-backed Silicon Valley experiment, followed by the 2020 election fraud, mass protests, and the brutal security response that triggered the IT exodus. * Formation and philosophy of the Cyber Partisans: How a small group of software engineers, cloud architects, and sysadmins (not traditional black-hat hackers) organized in September 2020, their explicit “anti-manifesto” rejecting donations, crypto, and harm to ordinary citizens, and their focus on embarrassment and exposure over destruction. * Major operations and asymmetric impact: The early state TV broadcast hijacking and the later deep leaks of Ministry of Internal Affairs databases, the national passport system (elite passports only), traffic police records, KGB safe-house/apartment registries, and internal police audio—operations that forced the regime to physically relocate assets and exposed sources & methods. * Broader implications: Exploration of “civilian grade warfare,” the shrinking capability gap between states and skilled civilians in cyber, the power of narrative and psyops, and why admitting to operations (something states rarely do) gives non-state actors unique advantages in the information space. Call to Action: * Subscribe to the podcast for more episodes on high-profile cyber intrusions. * Visit our website at intrusionsindepth.com for additional stories and insights. * Share your thoughts on social media using #IntrusionsInDepth. Links and Resources: * https://en.wikipedia.org/wiki/Cyber_Partisans (https://en.wikipedia.org/wiki/Cyber_Partisans) * https://warsawinstitute.org/day-47-48-state-tv-hacked-cyber-partisans/ (https://warsawinstitute.org/day-47-48-state-tv-hacked-cyber-partisans/) * https://medium.com/dfrlab/lukashenkas-regime-confused-about-belarus-cyber-partisans-activity-29f4bb530956 (https://medium.com/dfrlab/lukashenkas-regime-confused-about-belarus-cyber-partisans-activity-29f4bb530956) * https://monitoring.bbc.co.uk/product/b0004chs (https://monitoring.bbc.co.uk/product/b0004chs) * https://en.wikipedia.org/wiki/Belarusian_resistance_during_World_War_II (https://en.wikipedia.org/wiki/Belarusian_resistance_during_World_War_II) * https://en.wikipedia.org/wiki/Sviatlana_Tsikhanouskaya (https://en.wikipedia.org/wiki/Sviatlana_Tsikhanouskaya) * https://www.wric.com/news/u-s-world/ap-us-aid-cutoff-poses-new-challenges-to-rights-groups-and-independent-media-from-russia-and-belarus/ (https://www.wric.com/news/u-s-world/ap-us-aid-cutoff-poses-new-challenges-to-rights-groups-and-independent-media-from-russia-and-belarus/) * https://www.ned.org/2024-democracy-service-medal-sviatlana-tsikhanouskaya/ (https://www.ned.org/2024-democracy-service-medal-sviatlana-tsikhanouskaya/) * https://2021-2025.state.gov/u-s-support-for-democracy-in-belarus/ (https://2021-2025.state.gov/u-s-support-for-democracy-in-belarus/) * https://medium.com/@WaterBucket/understanding-ioctls-for-windows-vulnerability-research-exploit-development-c49229b38d8d (https://medium.com/@WaterBucket/understanding-ioctls-for-windows-vulnerability-research-exploit-development-c49229b38d8d) * https://attack.mitre.org/techniques/T1068/ (https://attack.mitre.org/techniques/T1068/) * https://therecord.media/belarusian-hackers-taunt-kaspersky-ver-report (https://therecord.media/belarusian-hackers-taunt-kaspersky-ver-report) * https://ics-cert.kaspersky.com/wp-content/uploads/2022/09/kaspersky-ics-cert-h1-2022-a-brief-overview-of-the-main-incidents-in-industrial-cybersecurity-eng.pdf (https://ics-cert.kaspersky.com/wp-content/uploads/2022/09/kaspersky-ics-cert-h1-2022-a-brief-overview-of-the-main-incidents-in-industrial-cybersecurity-eng.pdf) * https://nvd.nist.gov/vuln/detail/CVE-2021-31728 (https://nvd.nist.gov/vuln/detail/CVE-2021-31728) * https://ics-cert.kaspersky.com/publications/reports/2025/06/05/ttps-of-cyber-partisans-activity-aimed-at-espionage-and-disruption/ (https://ics-cert.kaspersky.com/publications/reports/2025/06/05/ttps-of-cyber-partisans-activity-aimed-at-espionage-and-disruption/) * https://en.belsat.eu/89582898/hackers-expose-6000-belarusian-kgb-officers-and-collaborators (https://en.belsat.eu/89582898/hackers-expose-6000-belarusian-kgb-officers-and-collaborators) * https://www.youtube.com/@cpartisans (https://www.youtube.com/@cpartisans) * https://cds.thalesgroup.com/en/node/100 (https://cds.thalesgroup.com/en/node/100) * https://lazomagazine.com/cyber-partisans-meet-the-hacktivists-working-to-democratize-belarus/ (https://lazomagazine.com/cyber-partisans-meet-the-hacktivists-working-to-democratize-belarus/) * https://www.govinfo.gov/content/pkg/COMPS-9805/pdf/COMPS-9805.pdf (https://www.govinfo.gov/content/pkg/COMPS-9805/pdf/COMPS-9805.pdf) * https://actsecuritygroup.com/the-5-ds-of-security-essential-strategies-for-protection/ (https://actsecuritygroup.com/the-5-ds-of-security-essential-strategies-for-protection/) * https://www.nbcnews.com/politics/national-security/cia-officer-arrested-gold-bars-accused-making-top-secret-program-sourc-rcna349032 * https://www.ragingrock.com/AndroidAppRE/app_fundamentals.html (https://www.ragingrock.com/AndroidAppRE/app_fundamentals.html) * https://www.economist.com/europe/2023/03/30/belaruss-beleaguered-opposition-is-flirting-with-violence (https://www.economist.com/europe/2023/03/30/belaruss-beleaguered-opposition-is-flirting-with-violence) * https://en.wikipedia.org/wiki/Victoria_Nuland (https://en.wikipedia.org/wiki/Victoria_Nuland) * https://bishopfox.com/tools/sliver (https://bishopfox.com/tools/sliver) * https://www.cbsnews.com/news/russia-nuclear-capable-missile-massive-attack-ukraine-dead-wounded/ (https://www.cbsnews.com/news/russia-nuclear-capable-missile-massive-attack-ukraine-dead-wounded/) * https://warsawinstitute.org/day-47-48-state-tv-hacked-cyber-partisans/ (https://warsawinstitute.org/day-47-48-state-tv-hacked-cyber-partisans/) * Host: Josh Stepp * Produced by: Josh Stepp Thank you for tuning in to IntrusionsinDepth. Stay informed, stay safe, and see you in the next episode! Get full access to IntrusionsInDepth at www.intrusionsindepth.com/subscribe (https://www.intrusionsindepth.com/subscribe?utm_medium=podcast&utm_campaign=CTA_4)

3. 

   25 Mar 2026

   012.1: WANNACRY

   On May 12, 2017, a piece of code quietly executed somewhere in Asia and within hours had locked computers across 150 countries. WannaCry wasn't just a ransomware attack — it was the collision of an NSA cyber weapon, a mysterious group of leakers, a sanctioned rogue nation, and a 22-year-old malware analyst working from his bedroom. In this episode, explore the full WannaCry story — the technical execution, the geopolitical chain of custody, the chaos it caused, and the harder questions nobody fully answered: Should the NSA have disclosed the vulnerability? Was this North Korea's best effort or a mistake that escaped? And what does it mean when the most dangerous cyber weapon in history gets stopped by a $10 domain registration? Call to Action: * Subscribe to the podcast for more episodes on high-profile cyber intrusions. * Visit our website at intrusionsindepth.com for additional stories and insights. * Share your thoughts on social media using #IntrusionsInDepth. Links and Resources: * https://techspective.net/2017/09/26/wannacry-ransomware-detailed-analysis-attack/ (https://techspective.net/2017/09/26/wannacry-ransomware-detailed-analysis-attack/) * https://www.nksc.lt/doc/ENISA-WannaCry-v1.0.pdf (https://www.nksc.lt/doc/ENISA-WannaCry-v1.0.pdf) * https://www.elastic.co/blog/wcrywanacry-ransomware-technical-analysis (https://www.elastic.co/blog/wcrywanacry-ransomware-technical-analysis) * https://www.nsa.gov/Press-Room/Press-Releases-Statements/Press-Release-View/Article/3681065/national-security-agency-announces-retirement-of-cybersecurity-director/ (https://www.nsa.gov/Press-Room/Press-Releases-Statements/Press-Release-View/Article/3681065/national-security-agency-announces-retirement-of-cybersecurity-director/) * https://en.wikipedia.org/wiki/WannaCry_ransomware_attack (https://en.wikipedia.org/wiki/WannaCry_ransomware_attack) * https://en.wikipedia.org/wiki/Tailored_Access_Operations (https://en.wikipedia.org/wiki/Tailored_Access_Operations) * https://en.wikipedia.org/wiki/Michael_Hayden_(general) (https://en.wikipedia.org/wiki/Michael_Hayden_(general)) * https://upload.wikimedia.org/wikipedia/commons/7/7d/ARN30043-ATP_7-100.2-000-WEB-2_-_North_Korean_Tactics_%28July_2020%29.pdf (https://upload.wikimedia.org/wikipedia/commons/7/7d/ARN30043-ATP_7-100.2-000-WEB-2_-_North_Korean_Tactics_%28July_2020%29.pdf) * https://commons.wikimedia.org/wiki/File:ARN30043-ATP_7-100.2-000-WEB-2_-_North_Korean_Tactics_(July_2020).pdf (https://commons.wikimedia.org/wiki/File:ARN30043-ATP_7-100.2-000-WEB-2_-_North_Korean_Tactics_(July_2020).pdf) * https://www.securityweek.com/us-army-report-describes-north-koreas-cyber-warfare-capabilities/ (https://www.securityweek.com/us-army-report-describes-north-koreas-cyber-warfare-capabilities/) * https://www.cs2ai.org/post/u-s-army-report-describes-north-korea-s-cyber-warfare-capabilities (https://www.cs2ai.org/post/u-s-army-report-describes-north-korea-s-cyber-warfare-capabilities) * https://cloud.google.com/blog/topics/threat-intelligence/mapping-dprk-groups-to-government (https://cloud.google.com/blog/topics/threat-intelligence/mapping-dprk-groups-to-government) * https://www.cloudflare.com/learning/security/ransomware/wannacry-ransomware/ (https://www.cloudflare.com/learning/security/ransomware/wannacry-ransomware/) * https://www.darkreading.com/cyberattacks-data-breaches/three-years-after-wannacry-ransomware-accelerating-while-patching-still-problematic (https://www.darkreading.com/cyberattacks-data-breaches/three-years-after-wannacry-ransomware-accelerating-while-patching-still-problematic) * https://www.bankinfosecurity.com/blogs/wannacrys-ransom-note-great-in-chinese-poor-in-korean-p-2481 (https://www.bankinfosecurity.com/blogs/wannacrys-ransom-note-great-in-chinese-poor-in-korean-p-2481) * https://trumpwhitehouse.archives.gov/briefings-statements/press-briefing-on-the-attribution-of-the-wannacry-malware-attack-to-north-korea-121917/ (https://trumpwhitehouse.archives.gov/briefings-statements/press-briefing-on-the-attribution-of-the-wannacry-malware-attack-to-north-korea-121917/) * https://securelist.com/wannacry-and-lazarus-group-the-missing-link/78431/ (https://securelist.com/wannacry-and-lazarus-group-the-missing-link/78431/) * https://www.wired.com/story/confessions-marcus-hutchins-hacker-who-saved-the-internet/ (https://www.wired.com/story/confessions-marcus-hutchins-hacker-who-saved-the-internet/) * https://en.wikipedia.org/wiki/WannaCry_ransomware_attack (https://en.wikipedia.org/wiki/WannaCry_ransomware_attack) * https://cloud.google.com/blog/topics/threat-intelligence/mapping-dprk-groups-to-government (https://cloud.google.com/blog/topics/threat-intelligence/mapping-dprk-groups-to-government) * https://cloud.google.com/blog/topics/threat-intelligence/north-korea-cyber-structure-alignment-2023/ (https://cloud.google.com/blog/topics/threat-intelligence/north-korea-cyber-structure-alignment-2023/) * https://www.wired.com/story/confessions-marcus-hutchins-hacker-who-saved-the-internet/ (https://www.wired.com/story/confessions-marcus-hutchins-hacker-who-saved-the-internet/) * https://darknetdiaries.com/transcript/158/ (https://darknetdiaries.com/transcript/158/) * https://www.britannica.com/biography/Kim-Yo-Jong * https://thediplomat.com/2026/02/why-kim-ju-aes-path-to-power-is-structurally-blocked/ * https://www.tripwire.com/state-of-security/malwaretech-wannacry-kronos-understanding-connections Books: * The Psychology of Totalitarianism (https://amzn.to/4rQjHLx) by Mattias Desmet * The Lazarus Heist (https://amzn.to/3Nf0AeX) by Geoff White * Fancy Bear Goes Phishing: The Dark History of the Information Age, in Five Extraordinary Hacks (https://amzn.to/42N4q2y) by Scott J. Shapiro * Host: Josh Stepp * Produced by: Josh Stepp Thank you for tuning in to IntrusionsinDepth. Stay informed, stay safe, and see you in the next episode! Get full access to IntrusionsInDepth at www.intrusionsindepth.com/subscribe (https://www.intrusionsindepth.com/subscribe?utm_medium=podcast&utm_campaign=CTA_4)

Reach and audience

Public platform figures. Ratings count people who left a rating, not total listeners.

Apple Podcasts (US)

5.0 / 5

1 ratings

Spotify

5.0 / 5

7 ratings

Podcast Authority Score: 32 / 100

A composite of feed quality, social presence, YouTube performance and engagement. Read the methodology.

Quality

65

Social presence

0

YouTube

0

Engagement

0

Contact IntrusionsInDepth Podcast

Guest appearances

Books guests

Based on episode analysis; this does not confirm that the show is currently accepting guests.