EXHIBIT 0001 — STUXNET

The first weapon made entirely of code.

In 2010, a piece of software walked into a nuclear facility that wasn't connected to anything and quietly destroyed the machinery inside.

Natanz was air-gapped. No internet, no network path in, by design. Stuxnet got there anyway — carried in on a USB drive, executing the moment someone opened a folder to see what was on it.

Once inside, it went looking for something very specific: Siemens Step7 software talking to industrial controllers, driving frequency converters running between 807 and 1210 Hz. That band isn't general-purpose machinery. It's uranium enrichment centrifuges and almost nothing else. On every other computer on earth, Stuxnet did nothing at all.

Where it found its target, it lied. It swapped out a Siemens communications library called s7otbxdx.dll for its own copy, intercepting sixteen of that library's hundred and nine functions — so every question the monitoring software asked the controller was answered by the malware instead. In one of its two attack routines it recorded twenty-one seconds of ordinary sensor readings and played them back on a loop.

Then it drove the hardware. IR-1 rotors are built to spin near 63,000 rpm. Stuxnet took them to 84,600 for fifteen minutes, and in a separate sequence dropped them to 120 and brought them back. Engineers watched a screen full of healthy numbers while the machinery came apart in the next room. It ran for months before anyone suspected software.

The details

Four zero-days, spent at once. Kernel drivers signed with certificates stolen from two Taiwanese chip companies — Realtek and JMicron, both revoked within a week of each other in July 2010. A hardcoded stop date of 24 June 2012, because somebody planned the cleanup. And sitting inside the infected controller code, a marker: 0xDEADF007.

It was found by accident. An antivirus engineer in Minsk named Sergey Ulasen took a complaint about computers that kept rebooting, pulled the thread, and found the most sophisticated malware ever written — because one of its components had a bug that crashed the machines it infected.

Outside analysts estimate roughly 1,000 centrifuges were pulled from Natanz and replaced in late 2009 and early 2010. No government has ever acknowledged building it.

Fit & print

- Gildan Softstyle® 64000, 100% ring-spun cotton in solid colors

- 4.5 oz/yd² (153 g/m²)

- Classic fit, crew neck, ribbed-knit collar

- Twill-tape reinforced shoulders, no side seams

- Pearlized tear-away label

- OEKO-TEX® STANDARD 100 certified (Certificate No. 168252, OETI)

- Cotton sourced under the US Cotton Trust Protocol

Heather colors are 35% cotton / 65% polyester. Sport Grey and Antique are 90% cotton / 10% polyester. Graphite Heather is 50/50. The White variant reads off-white rather than bright white — a property of the fabric, not the print.

First entry in the archive — read the full technical breakdown.