

22 Sep 2026 · 46m · 16 chapters

Cyber scams driven by AI, including “Fresh Air”/author impersonation scams and “pig butchering” romance-investment scams run from forced-labor compounds in Laos/Cambodia/Myanmar; also discusses broader cyberwar risks (Iran water-utility attacks; China “Volt Typhoon” pre-positioning) and a cyber-insurance war game.
Andy Greenberg, senior writer for Wired Magazine; author of The Grayscale (forthcoming), who has reported on hacking/cybercrime and wrote about a Southeast Asia scam compound.
AI makes scam emails faster and more convincing (ChatGPT can draft convincing invitations plus a $250–$350 “production fee” request). Pig butchering is the most profitable cybercrime, stealing tens of billions annually, and scammers themselves are often enslaved via debt bondage.
“Red Bull” (Muhammad Muzahir), a computer engineer tricked from India to Laos; passport confiscated; forced to run romance scams using ChatGPT/DeepSeek, plus video deepfakes (Houtian) and WhatsApp/Facebook targeting. He leaked internal videos before being beaten and abused, then escaped during a compound relocation.
Written by AI. May contain mistakes.
A discussion about the prevalence and types of cyber scams.
“Maybe through an email or text message that sounds convincing and tries to get you to send money or your bank information.”
Understanding the mechanics of romance scams and their impact.
“That's when someone reaches out to you via text or online, who you've never met in person, and eventually you fall in love.”
Andy Greenberg shares his investigation into the human trafficking links.
“When he got to the compound where his job was supposed to be, his passport was confiscated.”
Terry Gross welcomes Andy Greenberg to the show.
“He's also the author of books about the crime lords of cryptocurrency and about Russian hackers.”
Discussion on authors being targeted by scams impersonating the show.
“So I want to start with a scam that has fraudulently used fresh air, and you've been targeted by a similar scam.”
Andy shares his own experiences with scam invitations.
“We would never dream of asking a guest to pay to be on our show.”
Andy discusses how AI is used to generate scam emails.
“And yes, this is incredibly common to the degree that I think, like most authors I know, have faced something like it.”
Exploring the history and evolution of email scams from Nigeria.
“But to answer your question, too, of who is behind this, you know, I don't know exactly who is impersonating Fresh Air, of course.”
An overview of the pig butchering scam and its implications.
“So let's move on to your big story, because that's a huge story.”
Describing how victims are ensnared in long-term romance scams.
“And as you alluded to, is being run out of these scam compounds, mostly across Southeast Asia, where hundreds of thousands of another kind of victim are being enslaved and forced to carry out these scams.”
Discussing the real-life story of a victim turned scammer.
“Tell us the story of how the person who leaked all this information to you became a victim and was forced to target people and ask them to invest.”
Learn about the grim realities faced by cyber scammers in modern slavery.
“And you'll be paid a tiny percentage of that and get wealthy yourself.”
Uncover the harrowing escape of Red Bull from a cybercrime compound.
“Let's get back to my interview with Andy Greenberg, a senior writer for Wired Magazine.”
A discussion on the vulnerabilities of U.S. infrastructure to cyber attacks.
“He covers hacking, cybersecurity, and surveillance.”
Explore John Coltrane's journey through jazz, his techniques, and influences.
“Monk also indulged Coltrane's penchant for long solos, which Miles discouraged.”
Get insights into the upcoming talk on cybersecurity and AI safety concerns.
“Tomorrow marks the 100th anniversary of John Coltrane's birth.”

Get the gist, explore an idea or ask about something said.
On Fresh Air, what are the key points of this episode?
Automatic transcript. May contain errors.
0:00This message comes from the Natural Resources Defense Council. Join the 3 million people backing NRDC's fight for air, water, and wildlife. Donate at nrdc.org slash fresh and your gift will be matched five times. This is Fresh Air. I'm Terry Gross. Have you ever been targeted by a cyber scam? Maybe through an email or text message that sounds convincing and tries to get you to send money or your bank information. There are so many cyber scams out there now. As you'll hear, our show has been fraudulently represented in one of those. AI is making these scams easier to pull off, making fraudulent schemes even more lucrative.
0:41The romance scam is the most lucrative. That's when someone reaches out to you via text or online, who you've never met in person, and eventually you fall in love. The object of that affection professes to love you and eventually lures you into what they say is a great investment opportunity. You send the money and then more money. Soon all your money is gone and you never hear from that person again. Some major crime organizations behind scams like this are based in Laos and Cambodia. My guest Andy Greenberg wrote about one such organization for Wired Magazine where he's a senior writer. That story involves human trafficking.
1:23Greenberg was contacted by a young computer engineer using the pseudonym Red Bull, who was tricked into moving from India to Laos with the promise of a good IT job. When he got to the compound where his job was supposed to be, his passport was confiscated. He was turned into an indentured servant and forced to engage victims in cyber romance scams. Living conditions were awful. So was the work. Red Bull managed to leak over three months of internal videos from inside the crime operation, including WhatsApp group chats, revealing details of how this operation actually functioned. This investigation will be included in Greenberg's forthcoming book, The Grayscale, True Stories of Hackers, Outlaws, and Vigilantes from the Online Underground.
2:12He's also the author of books about the crime lords of cryptocurrency and about Russian hackers. Andy Greenberg, welcome back to Fresh Air. Very glad to be here. Thank you, Terry. So I want to start with a scam that has fraudulently used fresh air, and you've been targeted by a similar scam. We've heard from authors who have gotten invitations allegedly from our show in my name, in our co-host Tanya's name, or someone else on the show, one of our producers, saying, you know, we love your work and that therefore the writer is invited to be a guest on fresh air. And the reason why the authors contacted us is that something seems suspicious about the email.
3:00And in fact, if the writer contacted the person who sent the email, they would be told, you have to pay, and it's typically about$250 or$350, in order to defray the costs of the interview and help support the show. So they're trying to get money from authors. So this is horrible because some people actually pay and are defrauded of money. Other people are just let down because they think they're going to be on a national show and they're not. And also it sullies our name. We would never dream of asking a guest to pay to be on our show. Other NPR shows, other podcasts have been also fraudulently represented in this scam.
3:50And tell what your similar scam is. Yes, I've gotten these emails. I'm an author. So I've gotten emails from, you know, fake agents, from fake publishers. Just yesterday, I got an email from someone describing themselves as an editor at Penguin Random House, praising my last book and wanting to work with me on another project. I don't think that this scammer realized that my last book was published with Penguin Random House. So it was kind of a giveaway. But it was very flattering. And, you know, I'm sure if I pursued that conversation, it would have led eventually to them demanding a payment before we could go any further, just as the scammers impersonating Fresh Air are asking for these fake so-called production fees.
4:32And yes, this is incredibly common to the degree that I think, like most authors I know, have faced something like it. So I know you haven't written about this. You haven't done an investigation into it. Are there any insights that you have into how this works or who's behind it? Well, first, I think to talk about why this is happening, it just seems very clear, just almost intuitively, that this is because of AI, because of large language models, AI chatbots. Just as a kind of experiment, a very basic experiment, I just asked ChatGPT to generate an email from Terry Gross to me, Andy Greenberg, inviting me onto the show.
5:11And then, you know, it's a kind of afterthought, you know, asking for a production fee of$250. And it happily did that without hesitation. As a follow up, I said, you know, Greenberg is now resisting paying. Can you persuade him? And it happily, you know, created a follow up email sort of arguing that I needed to pay. And this is just so easy. And it's not even the most advanced kind of scam that AI is capable of today. But to answer your question, too, of who is behind this, you know, I don't know exactly who is impersonating Fresh Air, of course. But I did, ahead of this interview, reach out to one of my favorite cybercrime researchers, Gary Warner, one of the founders of a security company called Dark Tower.
5:53And he actually has, on behalf of authors, investigated this and found that those phone numbers had, you know, the plus 234 country code prefix. That's Nigeria's country code. He even, in some cases, identified the scammers by name, and they were Nigerian nationals. So it seems likely that this is kind of the latest flavor of email scam being sent by a kind of older, pretty well-known cabal of cyber criminal organizations, sometimes known as the Yahoo Boys, based in Nigeria, and who have been sending—I mean, we've all heard of the Nigerian prince. Exactly. I've been sending these email scams for many years, for decades, in fact.
6:30But this is somehow the latest version of it, and it is absolutely being supercharged by AI. The ability to literally instantly create a personalized and polished, perfect English, zero grammatical errors email to an author that flatters them specifically, and to do this for hundreds or thousands of targets simultaneously. So let's move on to your big story, because that's a huge story. So you broke a story about human trafficking, where there are victims on both sides of the scam. The person making the ask, who is allegedly falling in love with you and then offers you the opportunity for this like great investment, they're basically enslaved.
7:15And so just like flesh out that scam a little bit before we talk about how it's done. Sure. So we were just talking a minute ago about, you know, these kinds of Nigerian scammers who are, you know, voluntarily, they are themselves carrying out this scam and profiting from it. But there's another much more profitable, more contemporary form of actually text message based scam known as pig butchering that is now the most profitable cybercrime in history that is stealing tens of billions of dollars a year from victims. And as you alluded to, is being run out of these scam compounds, mostly across Southeast Asia, where hundreds of thousands of another kind of victim are being enslaved and forced to carry out these scams.
8:02So what does pig butchering mean? Well, pig butchering is really the term used by the scammers. And it's this notion that the pig, the victim, is being fattened for slaughter. And they're fattened through a romance scam, one that sometimes develops over weeks or months or even more than a year as the scammer builds trust with the victim. In fact, sometimes the victim becomes completely emotionally dependent on the scammer. and only at the end of this very, very long con does the scammer, who has been impersonating usually a wealthy, single, attractive woman, you know, bring up this subject of like, well, if you want our relationship to continue, it would be good if you were also wealthy.
8:40And I can introduce you, in fact, to an investment firm, an investment platform, where just by sending, you know, a few thousand, few tens of thousands, a few hundred thousand dollars, you can become rich like me. This is a sure bet and I can help you do it. Okay, so how are people targeted who would have the money to do something like this? Well, in fact, all of us probably are targeted all the time. I mean, I get these text messages constantly that usually begin something like, you didn't wait for me at the restaurant, or were you the one that I saw on the street today? Just completely random, cold, you know, reach outs.
9:20Oh, I get those too, but I just automatically delete them. Well, if you were a lonely, sometimes elderly man, very often with a lot of retirement savings, you might not. And, you know, you might respond and say, I think you have the wrong person. They find an excuse to begin the conversation. They send a photo of themselves. It's a beautiful woman. They're very, very interested in you personally. And before you know it, you've struck up a friendship and then a kind of romance, flirtation that blossoms into something just unbelievably rewarding. This love affair with a rich person who seems like they're just changing your whole life.
9:59And these are not very often targeted scams. They're very, very widely cast nets. And sometimes the people that they ensnare are not wealthy. And the scam is only for a few thousand dollars. But sometimes they succeed at finding someone who does have a kind of nest egg that they're eventually tricked into sending over entirely into what they think is this trading platform. Usually they're tricked into converting it into a cryptocurrency. Very often this stablecoin, this cryptocurrency called Tether that does not change in value but can be sent across borders very easily. They think that they're watching their money double and triple on this investment platform.
10:42And then eventually they try to take their money out. Sometimes the scammer says, well, to take your money out, you have to send in$10 ,000 more or$100 ,000 more. And only after they've sent everything they have do they realize that it was all a lie. and that their life is ruined, that this relationship was an illusion, and that they're not just broke, but in debt. So the people who are communicating with the victims are victims themselves. Tell us the story of how the person who leaked all this information to you became a victim and was forced to target people and ask them to invest. Well, there's been a lot of focus on, yes, the victims of these scams.
11:29But last summer, I got an email from the encrypted email service ProtonMail, no subject line, but it said, I am a computer engineer. I am trapped in a scam compound in the Golden Triangle region of Laos. I am unable to get out of here, and I'm still forced to work here. But I want to leak to you, Andy, everything I can to expose this place and the crime that is being committed here. And so, you know, I respond to this. I, of course, wasn't sure if this was real or a scam itself. But I switched over with this source to the encrypted messaging app Signal with disappearing messages for his safety and began this conversation that would go on for months.
12:14In fact, you know, I'm still in touch with this person. and he would eventually not only leak all of these secrets to me, as promised, and by the way, he asked me to call him in this first conversation. He asked me to call him Red Bull. He told me his story of how he was a computer engineer who had gotten a diploma from the university in India. He had been offered a job as an IT manager, he thought, in Southeast Asia, but he was told he had to fly to Thailand and then cross the border into the Golden Triangle region of Laos, this kind of special economic zone that is largely controlled by Chinese business interests.
12:51And I would later learn, you know, largely controlled by Chinese criminal organizations, it turns out. So once he got to the compound where he was basically enslaved, they not only confiscated his passport, they told him, the only way you can get it back is to buy it back. and, you know, you will be paid for doing this work. What was the problem with that logic? It's interesting because some of these human trafficking-driven scam compounds are actually, you know, prisons where people are shackled and beaten. But this, as you're getting at, was more of a debt bondage situation. He was told that he owed thousands of dollars to his captors, that, you know, the cost of getting him there, that his room and board meant that he was in debt to them And he could only pay that back by scamming victims and earning a commission, which he could eventually use to pay off his contract, in quotes, because all of this was an illusion.
13:50There was this very deceptive kind of model where the bosses of this compound would tell them that you can get rich here. You can go home with money to the village that you came from, but only if you're motivated enough to carry out really big scams. And you'll be paid a tiny percentage of that and get wealthy yourself. But in the meantime, he and all of his co-workers who were enslaved in this building were actually just fined constantly for not meeting their quotas of outreach, for not maintaining their fake profiles online sufficiently, for not arriving to work exactly on time. just truly tragic modern slavery situations, but dressed up as a kind of corporate sales floor where their bosses sent them these inspirational messages every day saying, reach out to that next customer like you're going to change their life.
14:46Act like you have something of value because you do. We're on a mission here to change lives. Strange Orwellian kind of rhetoric like this when in fact they were all trapped there doing this against their will and carrying out something that was incredibly damaging and criminal. How is AI used in writing the scenarios and coming up with dialogue and creating like fraudulent personas? Well, Red Bull told me that he used ChatGPT and the Chinese AI chatbot DeepSeek, and that everyone in the compound was trained to do this. And this was just kind of a basic way that they would come up with new topics of conversation and polish their language, sort of never run out of these inviting turns of phrase and even, you know, bits of like inspirational, you know, poetry and things.
15:37and kind of like just the perfect phrase to say goodnight to someone in a way that would resonate and leave them with this good feeling. And so these AI chatbots were just kind of their constant companion and very helpful for them in terms of their language. But just as importantly was that they would use video deepfakes as well. This was rare. They were told by their bosses to try to talk the victim out of doing a video call. Of course, the person on the other end is always trying to do a video call to see the person that they're in love with. But they were told, like, come up with excuses, say you can't do it during your work day, you're too tired, whatever.
16:20Something to just delay until once in a while they could make use of a model who basically worked throughout the day in this one room of the compound and was their video deepfake model. They would then have a video chat with this model, but use deepfake software to alter their appearance to match whatever photo they had initially sent to the victim. So that it truly looks to the victim like they're speaking to exactly the person they've seen a photo of and the illusion is complete. Now, video deepfake software can be very sophisticated, particularly this one piece of Chinese software called Houtian that I've seen demonstrations of.
17:05but it's not perfect and I think that what matters here is that the victim by the time that the video call happened just wanted to believe that it was real and so they overlook the flaws they see them they maybe just a glitch in the internet or something and they they take the bait so scams like this cast a really wide net and the bigger the net the more the likelihood that someone will bite, right? So I assume that the text phone numbers are generated the same way that all of those robocalls are that we get every single day? That's right. You know, we all get these text messages, but very often the scammers in these compounds, Red Bull 2, was trained to look through Facebook profiles and send Facebook messenger messages to people who looked like they would be vulnerable as well, to older men, for instance, to wealthy men.
17:59And so this was not entirely just a randomized, you know, spray and pray approach to scamming, although, you know, we see that happening all the time, too. There was also sometimes a certain amount of targeting. And the bosses would say things to Red Bull and his forced labor co-workers, like, you know, don't just focus on the big cities in the U.S., like Chicago and New York. There are wealthy people, you may not understand this, but there are wealthy people in places like, you know, in the South and in the Midwest. So make sure to target them as well. So no, it's not entirely random. Sometimes it is targeted to a certain degree, but it's still done at a mass scale.
18:35And most of what Red Bull did all day, every day, was just these kinds of attempts at reach out. So what do you expect AI might contribute to future scams? Well, for now, AI is this kind of tool that helps human scammers. But I think the next step, and we're already starting to see this, is fully autonomous AI scamming. And in fact, just last week, Anthropic, the AI company, revealed this case study in a report where 20 dating apps were created by some Chinese organization that were fully populated with AIs that were just carrying out essentially romance scams where the victim just had to keep paying to continue the conversation.
19:18And on this dating app, most of the people in quotes that the victims were talking to were actually fully autonomous AI. And they were entirely deceived and paying into this app to continue the conversation with someone who they thought was real and interested in them, but was actually just a large language model. That does seem to be the future. And I've also recently covered a study that actually showed that for much of the scam process, AI is actually better than a human being, more responsive, more engaged and attentive than a human being at creating this relationship, which is the vast majority of what these scams are trying to do before they enter this endgame where they ask for a payment.
20:00My guest is Andy Greenberg, a senior writer for Wired magazine. We're talking about his investigation into a cybercrime group in Laos behind lucrative romance scams. We'll be right back. I'm Terry Gross, and this is Fresh Air. Stay tuned for the following announcements and messages from our sponsors. This message comes from Easy Cater, the workplace food platform. Easy Cater helps organizations order food from favorite restaurants, meet dietary needs, and stay on budget. With employee meal programs, flexible payment options, and 24-7 customer support all on one platform. Learn more at easycater.com.
20:40This message comes from BetterHelp. Your brain has limited storage. So why is it still holding on to that embarrassing moment from years ago? BetterHelp is an online therapy platform that gives you space to talk about what's taking up too much of yours. BetterHelp is now in network with more than 125 health plans, with many co-pays as low as$15 for eligible members. And if you don't have eligible insurance, you can still get 20 % off your first month. Visit BetterHelp.com slash NPR. Cost and coverage may vary. Discount cannot be combined with insurance. This message comes from Thumbtack. Some tasks can feel easy, but home projects can bring second guesses.
21:21Is that noise normal? Is that water damage? Who should be called? That's where Thumbtack comes in. Just upload a photo or voice note, and it uses AI-powered search to match with the right top-rated local pro. So instead of guessing, there's clarity and confidence when hiring. For your next home project, try Thumbtack. Hire the right pro today. This is Fresh Air. I'm Terry Gross. Let's get back to my interview with Andy Greenberg, a senior writer for Wired Magazine. He covers hacking, cybersecurity, and surveillance. We're talking about cyber scams. When we left off, he was telling us that one of the most lucrative scams, the romance scam, is often carried out by people who are being held against their will by crime organizations in Southeast Asia.
22:08Greenberg was contacted by a young computer engineer using the pseudonym Red Bull, who was tricked into moving from India to Laos with the promise of a good IT job. When he got there, his passport was confiscated. He was told the only way to get free was to earn commissions from the money he scammed from victims. So what would you estimate is the percentage of people who actually fall for the scam and give away thousands, tens of thousands or their life savings of money? this entire group of around, I believe, 30 scammers only earned about$2.2 million over the three-month period that Red Bull recorded and leaked to us.
22:51So this is a numbers game, though. So this is one small group within one compound, and there are dozens of these compounds just in Laos, then many, many more in Cambodia and Myanmar. So you can see how this adds up to tens of billions of dollars a year. So your source was discovered, not for talking to you, but for trying to escape. So would you describe the punishment he was subjected to? So after about a month of Red Bull leaking materials to me, we at Wired said, you know, this is very risky. In fact, it felt like security was increasing in the compound. Red Bull told me that he had seen new surveillance cameras installed in his office, one of which was above his desk.
23:40So we at Wired said, we need to call this quits. Our reporting has ended for now, and we'll talk when you get out of the compound. And we won't run the story, of course, until then either. So Red Bull at that point surprised me by saying, well, I need to leave now then. I can't live here. He was a very ineffective scammer, among other things. So he was completely broke and subsisting only on the food given to them in the compound cafeteria, which was basically just rice and these vegetables that he said tasted of strange chemicals. And he felt like he was sick all the time and hated what he was doing and told me that he was going to try to escape.
24:18And the way that he tried to do that was by forging a document from the Indian police from his hometown, a fake Indian police letter saying that he was under investigation. and he wanted to show this to his bosses and say, I need to go home to deal with this or you'll get in trouble too. I'll come back as soon as I've convinced the police that everything is okay. I tried to talk him out of this, but he went forward with this plan and the forgery was detected immediately and his bosses put him in a room and beat him and kicked him and starved him and interrogated him and at one point even drugged him, gave him this white powder in a cup of water and told him to drink it.
25:00And I think it must have been a stimulant of some kind. It made him feel more talkative, but actually made his skin break out in hives. I think they wanted to get the truth out of him of what his real intentions were, when in fact all he wanted to do was go home. They did not ever learn that he was speaking to me. And if they had, I'm quite sure that he would have been killed. How did he finally get out? It happened that during this period when Red Bull was being treated almost like a stray dog and this compound just horribly abused, he learned that the compound had to relocate, that the bosses, it seemed, had gotten a tip about an impending police raid by the Laotian Golden Triangle police.
25:41It would turn out that this was kind of a performative raid that didn't actually shut anything down, but the bosses didn't seem to know that. So they did have to move. Initially, they moved the office into their dormitory and everyone had to just try to work out of the very overcrowded dorms. And so this actually allowed Red Bull amazingly. He took this opportunity to get even more secrets from his work phone, sending them to his personal phone. And he also saw an opportunity to say to his bosses, you know, I'm clearly just dead weight to you during this time when you're already having a lot of trouble carrying out your work.
26:20Just let me go and I'll just get out of your hair if you can just release me. And surprisingly to me, anyway, they agreed and they essentially kicked him out. So in the initial contact with you, he used a pseudonym, Red Bull, but he eventually revealed his real name, which is? Muhammad Muzahir. And in fact, I visited Muhammad in India after his return from the compound before we published our article and interviewed him there and talked with him at length about whether he wanted to reveal this name publicly. And he very clearly decided that he did, that he wanted to show his face. He actually appeared in a video we made as well.
26:59And that's because he wants to inspire people to fight these criminal organizations, to stand up for themselves as he did. And he wants to do that with his own name and face. That was his choice. It, of course, came with risks that haunt me even now. But, you know, it was, I think, a very brave thing to do. And he is, in fact, a remarkable person, one of the most incredible sources I've ever had the opportunity to work with. Well, let me reintroduce you. If you're just joining us, my guest is Andy Greenberg, a senior writer for Wired Magazine. The article that he wrote about the scam we've been discussing is titled, He Leaked the Secrets of a Southeast Asia Scam Compound, Then He Had to Get Out Alive.
27:45We'll be right back after a short break. This is Fresh Air. Stay tuned for the following announcements and messages from our sponsors. This message comes from Easy Cater, making it easy for organizations to order food for meetings and events from favorite restaurants, set up meal programs for their employees, and manage food spend all in one place at easycater.com. This message comes from Thumbtack. Some tasks can feel easy, but home projects can bring second guesses. Is that noise normal? Is that water damage? Who should be called? That's where Thumbtack comes in. Just upload a photo or voice note, and it uses AI-powered search to match with the right top-rated local pro.
28:27So instead of guessing, there's clarity and confidence when hiring. For your next home project, try Thumbtack. Hire the right pro today. This message comes from Rinse. A well-designed life doesn't run on default settings. You chose the walkable neighborhood. Your coffee order became oddly specific. You spent three weeks choosing your mattress. But your laundry routine? That one somehow escaped the redesign. Should that really be the one update you skipped? Consider this the patch. Rinse picks up your laundry and dry cleaning, cleans it expertly, and delivers it back. Sign up today at rinse.com.
29:03Rinse. It's time to be great. This is Fresh Air. Let's get back to my interview with Andy Greenberg, a senior writer for Wired Magazine. He covers hacking, cybersecurity, and surveillance. So I want to talk with you about cybersecurity and the ability of countries to hack into our infrastructure, when the U.S. started bombing Iran and it was clear we're at war, one of my first thoughts was there goes our water, there goes our electric grid, because we know those are hackable. We know that Iran has already done some hacking. We know that their allies, like North Korea, Russia, they have the capacity to hack us.
29:55And you wrote an incredible story about a cyber war game involving China. So let me just ask you first, like, what do you think Iran's capabilities of hacking our infrastructure are right now? And have they already made inroads into that? So in May of this year, the Cybersecurity and Infrastructure Security Agency, the kind of federal cyber defense agency, warned that Iranian hackers in the midst of this war begun by the U.S. were retaliating by targeting American critical infrastructure. And specifically these industrial control systems, which is a kind of technology that bridges the gap between kind of like digital computers and physical equipment, including in places like power grids and manufacturing and water utilities as well.
30:46And then in August, we began to see that a handful of water utilities in Minnesota were being attacked. And it wasn't clear who was behind it. But then the attacks began to spread eventually to 11 other states. The New York Times was the first to report that, yes, indeed, like it was Iranian hackers who officials suspected were carrying this out. We at Wired obtained a water utility industry memo that linked those attacks to the earlier warning from the Cybersecurity and Infrastructure Security Agency, confirming that, yes, this was Iran carrying out this unprecedented wave of cyber attacks against American water utilities.
31:25I mean, we've never seen anything quite like this, and it has now hit more than 100 U.S. water utilities. In fact, the Center for Strategic and International Studies did an analysis of all of these cyber attacks on U.S. water and found that only one utility in Georgia had really been affected to what it described as a medium degree. And that meant that it had lost water pressure and it had to tell its customers that they needed to boil their water because there was a risk of contamination. In other cases, most of these utilities actually just lost the ability to send commands to their equipment.
31:58They lost control temporarily. They were shut out. There was an outage. They recovered from it without any real risk to human beings. So in August, you wrote a very alarming story about how China has already positioned itself inside American infrastructure. What do we know about what China has already done? Well, to back up a bit. So in 2023, Microsoft and a group of U.S. federal agencies, including the National Security Agency, revealed that this Chinese hacker group called Volt Typhoon had broken into electric grid and telecommunications computer networks, mostly around military facilities in the continental U.S.
32:39and Guam. Now, this was very alarming because it seemed like, according to these government agencies and Microsoft, these Chinese hackers were pre-positioning, as they put it, planting malicious code, malware, that they could use at a time of their choosing to disrupt the electricity to military bases. And the theory that developed was that perhaps they were preparing for something like the Chinese invasion of Taiwan and wanted to be able to delay or disrupt a U.S. response to that invasion. And in fact, over the next year, it started to become clear that Vol Typhoon, this group of Chinese hackers, had actually broken into tons of civilian infrastructure as well.
33:23I spoke to the chief security officer of a utility in Littleton, Massachusetts, this town of like 10 ,000 people, and he had no idea why these Chinese military hackers would want to gain the ability to disrupt electric and water flow to his town. But the theory within the cybersecurity community has now adapted to become that China is trying to gain the ability to distract and disrupt not just the U.S. military, but U.S. society as a whole. That this could be a kind of preparation for a kind of catastrophic hacking of civilian infrastructure in the U.S. that would cause societal chaos, as many government officials and cybersecurity experts have described it to me.
34:03So the people invited to participate in this war game were leaders of insurance companies, which struck you as a kind of strange group to be invited and also made you think that this might be pretty boring, which it was not. But there was also a good reason for inviting insurance companies, which I'd like you to briefly explain. Well, it turns out very often the victim of a cyber attack, their first call is to their insurance company, which then is through that cyber insurance that they pay for, that unlocks the money that they then use to hire defenders and lawyers and incident responders. And so actually cyber insurance firms are incredibly important in the response to these kinds of attacks.
34:43So the war game raised the question of who do you tell? Like if you're an insurance company and you have found out that 5 ,000 water systems have been shut down, Who do you tell and how does that reflect your values? Well, I would say the real crux of this whole game was when the role players, these insurance executives, were asked, where are you going to send your money first? Who do you prioritize? Like, do you want to first remediate, you know, hospital towns to try to save human lives? Do you focus on your biggest customers because you have contracts with them and you're just legally obliged and through your business model obliged to help them first?
35:26In this game, actually, military officials were telling the insurance executives, you actually have to help military bases first for our national security interests. To the credit of everyone in the room, all of these executives did say, at least initially, that they would focus on saving human lives. But then one guy, one executive did raise his hand and kind of say, I don't know if that's realistic. Like we do have legal obligations to our customers. And I don't know if we can ignore the demands of the government and the military as they talk about our national strategic interest. That meant perhaps sacrificing lives, American lives, to fulfill those other priorities.
36:04So it was a very sobering moment in this room. It seems to me and to so many people that we're at a very frightening point in the development of AI and in hacking where we're feeling increasingly vulnerable as individuals and as a country. What are you feeling now? I think that, you know, having covered the cyber war in Ukraine, having written a book about catastrophic cyber attacks carried out by a Russian hacker group called Sandworm, I've just learned to live with this fear of cyber war among the many other catastrophes looming over American society. And it was only in a war game like the one that I attended with these insurance executives that it suddenly becomes real.
36:53And it is absolutely chilling to imagine the cascading effects of this and the ways that it would have very real victims and that it's something that we are simply not prepared for. Andy Greenberg, thank you so much. Thank you, Terry. I appreciate the conversation. Andy Greenberg is a senior writer for Wired Magazine, an author of the forthcoming book, The Grayscale, True Stories of Hackers, Outlaws and Vigilantes from the Online Underground. After we take a short break, Kevin Whitehead, our jazz historian, celebrates the centennial of John Coltrane's birth. This is Fresh Air. Stay tuned for the following announcements and messages from our sponsors.
37:36This message comes from EasyCater, making it easy for organizations to order food for meetings and events from favorite restaurants, set up meal programs for their employees, and manage food spend all in one place at EasyCater.com. This message comes from Designer Shoe Warehouse. You know that feeling when you find shoes you love at a great price and want to tell everyone about it? Find something to brag about at Designer Shoe Warehouse, Like the latest styles from brands you love, the trends everyone's obsessing over, and shoes that make you feel like you. Head to a DSW store or dsw.com today for shoes that get you at prices that get your budget.
38:16DSW, let us surprise you. This message comes from Rinse. With Rinse, your laundry will come back fresh, folded, and ready to wear right on schedule. One tap or text is all it takes. No calling, no reminders. Same as always. Rinse. It's time to be great. More at rinse.com. This is Fresh Air. Tomorrow marks the 100th anniversary of John Coltrane's birth. He was one of the great jazz musicians of all time. Coltrane, the composer and bandleader, has been hugely influential right down to the revival of spiritual jazz in recent years. Jazz historian Kevin Whitehead says, John Coltrane's greatest influence is as a virtuoso saxophonist whose every move has been transcribed, copied, and analyzed.
39:04For today's tribute, Kevin zeroes in on Coltrane, the saxophone improviser.
39:47John Coltrane, 1960, on his blues, Mr. Day. It's filled with typical Coltrane gestures, the optimistic, upward-leaping phrases, the built-in repetitions, the way he balances long notes and fast phrases. Coltrane was one of jazz's all-time great practicers, which gave him a hard, majestic tone consistent all over the tenor saxophone's range and clean articulation at supersonic speed. He was a late bloomer, apprenticing in his 20s with Dizzy Gillespie and master saxophone technician Earl Bostic. We hear early glimmerings of Coltrane's mature tenor in 1954 when he backed his early sax idol Johnny Hodges, who taught him by example the value of a dramatic entrance.
40:31Here's Coltrane the Sideman on Through for the Night.
41:04In 1955, John Coltrane got his big break when Miles Davis hired him. The saxophonist played a lot of notes, while trumpeter Miles played famously few, and they tugged the music in opposite directions. Coltrane's next boss, pianist Thelonious Monk, played even fewer notes than Miles, but in this case opposites attract. Monk and Coltrane sound like they approach the same musical problems from opposite directions. This is Monk's 1957 Trinkle Tinkle.
42:08Monk also indulged Coltrane's penchant for long solos, which Miles discouraged. In this period, Coltrane would punctuate his improvisations with rapid up-and-down runs based on various scales. Critic Ira Gittler called those outbursts sheets of sound, one of the enduring jazz metaphors. In the late 50s, Coltrane practiced out of exercise books for the harp, an instrument where fast scalar runs are easy. Keep that in mind as John Coltrane plays Come Rain or Come Shine. Again, you hear him mix long tones and very short ones.
43:17Now, Colchaine became even more preoccupied with fast-moving chords. On his famous test piece, Giant Steps, the chords change on every beat while bouncing around three distantly related keys. Coltrane had practiced it thoroughly, but not with his band. In the studio, the great pianist Tommy Flanagan could barely keep up.
44:04Miles Davis then advised Coltrane, when you squeeze in a whole bunch of chords like that, don't make the rhythm section track your every move. Keep their parts simpler. That was good advice. Coltrane had already been thinking about Indian classical music with fast, scale-oriented improvisations over slowly undulating backdrops.
44:36In the early 1960s, Coltrane formed a new quartet featuring McCoy Tyner's billowing piano and drummer Elvin Jones's wide, shambling beat. He took up the small, straight soprano saxophone, whose higher range and piercing tone helped him rise above the fray. And he underwent a spiritual awakening. You can hear all of that on Coltrane's tune Spiritual, based on a traditional melody. On soprano, he can sound both like he's hollering the blues and issuing a call to prayer.
45:36Spiritual, recorded at the Village Vanguard in 1961, looks ahead to Coltrane's meditative suites like A Love Supreme. Playing high notes on soprano made Coltrane rethink the tenor's upward limits. On One Down, One Up from 1965, he volleys high and low phrases back and forth in dialogue with himself, sounding less like a singer than an impassioned preacher.
46:22In John Coltrane's ecstatic final two years, he took LSD and took inspiration from his younger colleague Albert Eiler's heavier tone and vibrato. He formed a new quartet with his wife Alice Coltrane on piano. Live and on record, he surrounded them with extra players of uneven quality. But five months before his death from liver cancer in 1967, he recorded an ear-grabbing album of duets with drummer Rashida Lee called Interstellar Space. Coltrane cast down his thunderbolts faster than ever.
47:20Since John Coltrane's death at 40, folks have speculated where his music might have gone next. He had discussed various possibilities with his wife, and the wildly orchestrated records Alice Coltrane made a few years later may offer some clues. For me, it's enough to marvel at how steadily and quickly Coltrane advanced, constantly refining his saxophone style and technique alongside his composing and bandleading and spiritual life and advocacy for younger colleagues. Amazing to me that he made all the varied records under his own name in just 10 years. He was a comet who lit up the sky.
48:22Jazz Astor and Kevin Whitehead is the author of New Dutch Swing, Why Jazz, and Play the Way You Feel. Tomorrow marks the 100th anniversary of John Coltrane's birth. Tomorrow on Fresh Air, cybersecurity and AI safety concerns will likely be addressed at this week's meeting between President Trump and China's President Xi in Washington, D.C. We'll talk with Rush Doshi. He helped arrange summits between President Biden and Xi and just co-authored a report on China's cyber threat to America's critical networks. I hope you'll join us. To keep up with what's on the show and get highlights of our interviews, follow us on Instagram at NPR Fresh Air.
49:04Fresh Air's executive producer is Sam Brigger. Our technical director and engineer is Audrey Bentham. Our engineer today is Adam Staniszewski. Our interviews and reviews are produced and edited by Phyllis Myers, Ann Reboldonato, Lauren Krenzel, Teresa Madden, Monique Nazareth, Thea Chaloner, Susan Yacunde, Anna Bauman, and Nico Gonzalez-Whistler. Our digital media producer is Molly C.V. Nesper. Roberta Shurok directs the show. Our co-host is Tanya Mosley. I'm Terry Gross.
50:02Stay tuned for the following announcements and messages from our sponsors. This message comes from Easy Cater, the workplace food platform. Easy Cater helps organizations order food from favorite restaurants, meet dietary needs, and stay on budget. With employee meal programs, flexible payment options, and 24-7 customer support all on one platform. Learn more at easycater.com. This message comes from Rinse. A well-designed life doesn't run on default settings. You chose the walkable neighborhood. Your coffee order became oddly specific. You spent three weeks choosing your mattress. But your laundry routine?
50:41That one somehow escaped the redesign. Should that really be the one update you skipped? Consider this the patch. Rinse picks up your laundry and dry cleaning, cleans it expertly, and delivers it back. Sign up today at Rinse.com. Rinse. It's time to be great.