NSA Tailored Access Operations unit specializes in “getting the ungettable”, intercepts hardware shipments to plant malware
The NSA Uses Powerful Toolbox in Effort to Spy on Global Networks — The NSA's TAO hacking unit is considered to be the intelligence agency's top secret weapon.
Context & Ripple Effects
The picture of NSA offensive capability has been assembling piece by piece since October, when Schneier disclosed the FOXACID system that serves tailored exploits to predetermined targets. Der Spiegel's new reporting adds the physical layer: TAO, described internally as the agency's 'top secret weapon' specializing in 'getting the ungettable', intercepts hardware shipments to plant malware, backed by what the syndicated coverage describes as a roughly fifty-page catalog of exploits and implants for gear from Cisco, Huawei, Dell, Juniper, Western Digital and Seagate.
Timing sharpens the impact: within ten days, leaked documents showed NSA-British targeting of allied officials and energy firms, the $10 million RSA contract to weaken embedded encryption surfaced, and Judge William Pauley ruled the phone-metadata dragnet lawful on 27 December. The breadth of pickup — Guardian, CNET, Forbes, Engadget, Business Insider and others running the story on or about publication day — signals this landed as the capstone of the month's Snowden cascade.
First-order effects
- Cisco, Juniper, Dell, Western Digital, Seagate and Huawei now have named entries in an alleged NSA implant catalog, forcing each vendor to answer customer questions about whether intercepted shipments were compromised.
Second-order effects
- Enterprise and government buyers outside the US gain grounds to weight supply-chain provenance when purchasing American network and storage hardware, while the RSA contract revelation compounds skepticism at the cryptographic layer — trust erodes simultaneously in silicon and software.
Third-order effects
- If shipment-interception proves systemic rather than targeted, procurement splits along national lines: states treat globalized hardware supply chains as an attack surface and build sovereign or domestically audited alternatives, and security architecture shifts to assume compromise at every layer rather than trusting the box.
The trend: State espionage is moving down the stack from network-delivered exploits to physical supply-chain implants, turning the global hardware trade itself into contested intelligence terrain.