Andy Greenberg

Five articles in both 2024Q2 and 2024Q3 marked a renewed run of WIRED reporting by Andy Greenberg on Russian cyber operations, privacy, and crypto investigations.

Who they are

Andy Greenberg appears in this coverage as a WIRED journalist focused on cybersecurity, surveillance, privacy, state-linked hacking, and the human consequences of financial and digital-security enforcement. The corpus also places him in reported interviews and profiles, including pieces on Signal President Meredith Whittaker, crypto investigator ZachXBT, and former Binance compliance executive Tigran Gambaryan.

The recent arc

Coverage rose in 2024Q2 and 2024Q3, with five articles in each quarter, after a comparatively light start to the year. That run combined reporting on product-security fallout and cyber espionage: Microsoft’s decision to make Recall opt-in and encrypt its search index, Google’s warning that Iran-backed APT42 targeted US presidential campaigns, and reporting that Cadet Blizzard was part of Russia’s GRU Unit 29155. A November story on APT28’s Wi-Fi “nearest neighbor attack” sustained the Russia-linked intrusion focus.】【：】【“】【、】【The emphasis then broadened from malware and espionage into security’s institutional and personal stakes. Greenberg’s August 2024 interview with Whittaker covered Signal’s nonprofit model, EU priorities, elections, and Pavel Durov’s arrest; his October ZachXBT profile examined decentralized crypto-scam investigations. The 2025 reporting includes Gambaryan’s imprisonment in Nigeria, relayed through texts from a secret phone, and a December look at privacy-focused phone carrier Phreeli.

The tension

The coverage repeatedly circles the conflict between systems meant to offer privacy or accountability and the actors able to undermine them. Russian and Iranian state-linked groups appear in reporting on targeted intrusion campaigns, while Microsoft’s Recall controversy highlights mistrust around data-heavy platform features; Signal, Phreeli, and ZachXBT represent different responses through private communications, privacy-preserving telecoms, and public crypto tracing.

Why it matters

If this trajectory holds, Greenberg’s coverage will remain useful for connecting technical security incidents to the institutions and people affected by them: users confronting platform surveillance risks, governments facing state-backed espionage, and individuals navigating crypto or enforcement disputes. The mix of adversary reporting and profiles suggests that the key question is not merely whether systems are secure, but who controls sensitive information and what recourse remains when that control fails.

Related: @WIRED · Russia · FBI · WikiLeaks · Google