More Exact Colonial Pipeline Hack Details

It is prudent to review several sources for the real evidence and details and most often non-government companies are the ‘go-to’ places for that. Government spins stuff but private cyber experts offer up great context and such is the case below.

FBI Confirms Darkside Behind Colonial Pipeline Ransomware ... source

As a primer, CISA is a government agency launched by the Trump administration for all the right reasons.

Alert (AA20-049A)

Ransomware Impacting Pipeline Operations

But read on.

The US Cybersecurity and Infrastructure Security Agency (CISA) has issued an Alert that offers a set of best practices to protect against ransomware-induced business disruptions. The Alert was prompted by the attack against Colonial Pipeline, and it includes in its introductory section the preliminary conclusion that DarkSide ransomware affected Colonial’s IT systems only, and had no direct effect on the company’s OT networks. The best practices CISA advocates are familiar. The Alert closes with a statement strongly discouraging any victim from paying the ransom their attackers demand: “Paying a ransom may embolden adversaries to target additional organizations, encourage other criminal actors to engage in the distribution of ransomware, and/or may fund illicit activities. Paying the ransom also does not guarantee that a victim’s files will be recovered.”

FireEye yesterday published a report on DarkSide that emphasizes the group’s ransomware-as-a-service model. It’s a selective operation (criminal applicants for affiliate status are, for example, interviewed before being given access to DarkSide’s control panel) but it’s also not a monolithic one. FireEye’s Mandiant unit currently tracks five “clusters” of DarkSide threat activity. The affiliate model DarkSide uses shares criminal profits: “Affiliates retain a percentage of the ransom fee from each victim. Based on forum advertisements, this percentage starts at 25 percent for ransom fees less than $500,000 USD and decreases to 10 percent for ransom fees greater than $5M USD.”

Colonial Pipeline’s website came back online late yesterday, newly armored with a reCAPTCHA landing page. The company published an update in which it reported progress toward resumption of refined petroleum deliveries, with some 967,000 barrels delivered to Atlanta, Belton and Spartanburg in South Carolina, Charlotte and Greensboro in North Carolina, Baltimore, and Woodbury and Linden (close to the Port of New York and New Jersey). Some lines have been operated under manual control since Monday, at least, and have been moving existing inventory. As the company prepares to restart deliveries, they’ve taken delivery of an additional two million barrels, which they’ll ship once service is restored.

The company appears also to be addressing some concerns about its pipelines’ physical security, having “increased aerial patrols of our pipeline right of way and deployed more than 50 personnel to walk and drive ~ 5,000 miles of pipeline each day.” (hat tip to CyberWire)

Related reading:

Colonial Pipeline using vulnerable, outdated version of Microsoft Exchange: report
Pipeline operators were warned about potential attacks in 2020

“Energy Sector…developed the 2011 Roadmap to Achieve Energy Delivery Systems Cybersecurity…sector’s vision that “by 2020, resilient energy delivery systems are designed, installed, operated, and maintained to survive a cyber-incident while sustaining critical functions…”

 

A Chinese Freeze Dried Virus Part of Warfare?

“The PLA is engaging in irregular warfare today,” the West Point paper asserts. “China is employing lawfare to achieve strategic aims. The maritime militia is enforcing China’s sovereignty claims in the East and South China Seas against US partners and allies.”

And it has already weaponised international information flows and channels of influence, along with cyber, economic – and psychological – tactics. Source

Primer: Chinese scientists have been preparing for a Third World War fought with biological and genetic weapons including coronavirus for the last six years, according to a document obtained by US investigators.

The bombshell paper, accessed by the US State Department, insists they will be ‘the core weapon for victory’ in such a conflict, even outlining the perfect conditions to release a bioweapon, and documenting the impact it would have on ‘the enemy’s medical system’.

This latest evidence that Beijing considered the military potential of SARS coronaviruses from as early as 2015 has also raised fresh fears over the cause of Covid-19, with some officials still believing the virus could have escaped from a Chinese lab.

***

Before Covid-19, did we actually know who Anthony Fauci was and what he is about? Since 1984, he has been the Director of NIAID. His portfolio says is complete with prevention, diagnosis and treatment(s) of infectious diseases. Remember the Ebola crisis? Did we hear his name back then and did the Obama administration hire Fauci for guidance on the Ebola outbreak? Nah. What about Zika? Remember that one? Still we did not hear from Dr. Fauci. According to his professional profile, Fauci advised and served seven presidents. Really? Did Dr. Fauci even advise presidents on all things pandemic, virus or risks from Wuhan? If so….where is the evidence?

According to the National Institute of Health website going back to 2018, there is a profound ‘Serological Evidence of Bat SARS-Related Coronavirus Infections in Humans, China dissertation complete with references and footnotes.

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Notice this is a partial screen shot in case it gets deleted by NIH. But note the dates in the summary. Further in the summary –> We conducted a virus neutralization test for the six positive samples targeting two SARSr-CoVs, WIV1 and WIV16 (Ge et al. ; Yang et al. ). None of them were able to neutralize either virus. These sera also failed to react by Western blot with any of the recombinant RBD proteins from SARS-CoV or the three bat SARSr-CoVs Rp3, WIV1, and SHC014. We also performed viral nucleic acid detection in oral and fecal swabs and blood cells, and none of these were positive.

Further in the study is this notation:

Acknowledgements

This study was jointly funded by the National Natural Science Foundation of China Grant (81290341) to ZLS; the National Institute of Allergy and Infectious Diseases of the National Institutes of Health (Award Number R01AI110964) to PD and ZLS, United States Agency for International Development (USAID) Emerging Pandemic Threats PREDICT project Grant (Cooperative Agreement No. AID-OAA-A-14-00102) to PD; and Singapore NRF-CRP Grant (NRF2012NRF-CRP001–056) and CD-PHRG Grant (CDPHRG/0006/2014) to LFW.

We have some harder questions to ask of Dr. Fauci and a few other U.S. agencies…right? YES.

So, back to the paper originally released by the Australian and the DailyMail:

The authors of the document insist that a third world war ‘will be biological’, unlike the first two wars which were described as chemical and nuclear respectively.

Referencing research which suggested the two atomic bombs dropped on Japan forced them to surrender, and bringing about the end of WWII, they claim bioweapons will be ‘the core weapon for victory’ in a third world war.

The document also outlines the ideal conditions to release a bioweapon and cause maximum damage.

The scientists say such attacks should not be carried out in the middle of a clear day, as intense sunlight can damage the pathogens, while rain or snow can affect the aerosol particles.

Instead, it should be released at night, or at dawn, dusk, or under cloudy weather, with ‘a stable wind direction…so that the aerosol can float into the target area’.

Meanwhile, the research also notes that such an attack would result in a surge of patients requiring hospital treatment, which then ‘could cause the enemy’s medical system to collapse’.

Other concerns include China’s ‘Gain of Function’ research at the Wuhan Institute of Virology – near where the first Covid outbreak was discovered – at which virologists are creating new viruses said to be more transmissible and more lethal.

MP Tom Tugendhat, chairman of the foreign affairs committee, said: ‘This document raises major concerns about the ambitions of some of those who advise the top party leadership. Even under the tightest controls these weapons are dangerous.’

Chemical weapons expert Hamish de Bretton-Gordon said: ‘China has thwarted all attempts to regulate and police its laboratories where such experimentation may have taken place.’

The revelation from the book What Really Happened in Wuhan was reported yesterday.

The document, New Species of Man-Made Viruses as Genetic Bioweapons, says: ‘Following developments in other scientific fields, there have been major advances in the delivery of biological agents.

‘For example, the new-found ability to freeze-dry micro-organisms has made it possible to store biological agents and aerosolise them during attacks.’

It has 18 authors who were working at ‘high-risk’ labs, analysts say.

Australian Strategic Policy ­Institute executive director Peter Jennings also raised concerns over China’s biological research into coronaviruses potentially being weaponised in future.

Additionally in the article :

Only this week, Brazil President Jair Bolsonaro appeared to strongly criticise China by accusing it of creating Covid to spark a chemical ‘warfare.’

The comments were made during a press conference on Wednesday as the hardline leader sought to further distance himself from the growing attacks over his domestic handling of a pandemic that has produced the second-highest death toll in the world.

‘It’s a new virus. Nobody knows whether it was born in a laboratory or because a human ate some animal they shouldn’t have,’ Bolsonaro said.

‘But it is there. The military knows what chemical, bacteriological and radiological warfare. Are we not facing a new war? Which country has grown its GDP the most? I will not tell you.’

Since we can no longer get reliable information from our current government officials, perhaps we should ask Brazil or Australia, right?

Scientists studying bat diseases at China‘s maximum-security laboratory in Wuhan were engaged in a massive project to investigate animal viruses alongside leading military officials – despite their denials of any such links.

Documents obtained by The Mail on Sunday reveal that a nationwide scheme, directed by a leading state body, was launched nine years ago to discover new viruses and detect the ‘dark matter’ of biology involved in spreading diseases.

One leading Chinese scientist, who published the first genetic sequence of the Covid-19 virus in January last year, found 143 new diseases in the first three years of the project alone.

The fact that such a virus-detection project is led by both civilian and military scientists appears to confirm incendiary claims from the United States alleging collaboration between the Wuhan Institute of Virology (WIV) and the country’s 2.1 million-strong armed forces. Continue reading in full here.

What does Canada know?

National Microbiology Lab in Winnipeg gets $5M to expand ...

In part:

In July 2019, a rare event occurred in Canada, whereby a group of Chinese virologists were forcibly dispatched from the Canadian National Microbiology Laboratory (NML) in Winnipeg, a facility they worked in, running parts of the Special Pathogen Programme of Canada’s Public Health Agency.1 Experimental infections – including aerogenic ones – of monkeys with the most lethal viruses found on Planet Earth comprise nearly a routine therein. Four months earlier, a shipment of two exceptionally virulent viruses dealt with in the NML – Ebola and Nipah viruses – was on its way from NML, ended in China, and has thereafter been traced and regarded to be improper, specifically put as “possible policy breaches”, or rather but an “administrative issue”, ostensibly.2

Yet the scope of this incident is much wider, in actuality. The main culprit seems to be Dr. Xiangguo Qiu, an outstanding Chinese scientist, born in Tianjin. Heading until recently the Vaccine Development and Antiviral Therapies section of the Special Pathogens Programme, she primarily received her medical doctor degree from Hebei Medical University in China in 1985 and came to Canada for graduate studies in 1996.3 Later on, she was affiliated with the Institute of Cell Biology and the Department of Pediatrics and Child Health of the University of Manitoba, Winnipeg, not engaged with studying pathogens.4 But a shift took place, somehow. Since 2006,5 she has been studying powerful viruses, Ebola virus foremost, in the NML. The two viruses shipped from the NML to China – Ebola and Nipah – were studied by her in 2014, for instance (together with the viruses Machupo, Junin, Rift Valley Fever, Crimean-Congo Hemorrhagic Fever and Hendra).6 Yet utmost attention has been paid to Ebola, with the highly legitimate aim of developing effective prophylaxis and treatment for infected people. Inevitably, her works included a variety of Ebola wild strains – among them the most virulent one, with 80% lethality rate – and much relied on experimental infections of monkeys, including via the airways.7 Remarkable achievements were attained, indeed, and Dr. Qiu accepted the Governor General’s Innovation Award in 2018. More here.

Even media in India is asking for the same transparency on the Canadian component:

Source: China has been a signatory to the Biological Weapons Convention since 1984, and has repeatedly insisted it is abiding by the treaty that bans developing bio-weapons.

But suspicions have persisted, with the U.S. State Department and other agencies stating publicly as recently as 2009 that they believe China has offensive biological agents.

Though no details have appeared in the open literature, China is “commonly considered to have an active biological warfare program,” says the Federation of American Scientists. An official with the U.S. Army Medical Research Institute of Chemical Defence charged last month China is the world leader in toxin “threats.”

In a 2015 academic paper, Shoham – of Bar-Ilan’s Begin-Sadat Center for Strategic Studies – asserts that more than 40 Chinese facilities are involved in bio-weapon production.

China’s Academy of Military Medical Sciences actually developed an Ebola drug – called JK-05 — but little has been divulged about it or the defence facility’s possession of the virus, prompting speculation its Ebola cells are part of China’s bio-warfare arsenal, Shoham told the National Post.

The Harbinger of the Colonial Pipeline Ransomware

The harbinger is what protections against hacks and ransomware are underway? Stopping oil and gas flow and delivery is how to stop life and economies. Apply some critical thinking here…it goes way beyond cost as supply is crucial. If the FBI was well aware of the DarkSide in 2020….we need to rethink the Bureau completely.

PC Magazine provides this update in part:

The FBI today confirmed that the cyberattack that forced Colonial Pipeline to take its network offline over the weekend is due to ransomware known as DarkSide.

“The FBI confirms that the DarkSide ransomware is responsible for the compromise of the Colonial Pipeline networks,” the agency says. “We continue to work with the company and our government partners on the investigation.”

During a Monday White House press briefing, Anne Neuberger, Deputy National Security Advisor for Cyber and Emerging Technology, said the FBI has been investigating the DarkSide variant since October 2020, and has determined that it’s a ransomware-as-a-service attack, meaning “criminal affiliates conduct attacks and then share the proceeds with ransomware developers,” she said.

Though news reports have tied DarkSide to Russian operatives, President Biden said Monday that “so far, there’s no evidence…from our intelligence people that Russia is involved, although there is evidence that the actors [behind the ransomware are] in Russia, [so] they have some responsibility to deal with this.”

Colonial Pipeline cyberattack shuts down pipeline that ...

The Chicago Tribune along with other media sources post the notion that this should not last long:

The operator of a major U.S. pipeline hit by a cyberattack said Monday it hopes to have service mostly restored by the end of the week.

Colonial Pipeline offered the update after revealing that it had halted operations because of a ransomware attack the FBI has linked to a criminal gang.

The ransomware attack on the pipeline, which the company says delivers roughly 45% of fuel consumed on the U.S. East Coast, raised concerns that supplies of gasoline, jet fuel and diesel could be disrupted in parts of the region if the disruption continues.

At the moment, though, officials said there is no fuel shortage.

The Colonial Pipeline transports gasoline and other fuel through 10 states between Texas and New Jersey, according to the company.

Colonial is in the process of restarting portions of its network. It said Sunday that its main pipeline remained offline, but that some smaller lines were operational. The company has not said when it would completely restart the pipeline.

“The time of the outage is now approaching critical levels and if it continues to remain down we do expect an increase in East Coast gasoline and diesel prices,” said Debnil Chowdhury, IHS Markit Executive Director. The last time there was an outage of this magnitude was in 2016, he said, when gas prices rose 15 to 20 cents per gallon. But the Northeast had significantly more local refining capacity at that time, potentially intensifying any impact.

The FBI and others got the attribution right on this one and did so very quickly.

The group behind the ransomware that took down Colonial Pipeline late last week has apologized for the “social consequences,” claiming that its goal is to make money, not cause societal problems.

According to Vice, the group’s apology was posted to its dark web site. It reads:

We are apolitical, we do not participate in geopolitics, do not need to tie us with a defined government and look for other our motives.

Our goal is to make money and not creating problems for society.

From today, we introduce moderation and check each company that our partners want to encrypt to avoid social consequences in the future.

According to NYT cybersecurity reporter Nicole Perlroth, DarkSide isn’t necessarily associated with a specific nationstate, but it does tend to avoid holding victims for ransom if their systems are running in certain Russian and Eastern European languages (see embedded tweet below). Bloomberg reports that the group is known to speak Russian.

Source:

Imagine the other worldwide pipeline systems and their respective responses such as all of Europe.

Natural gas pipelines of Europe and surrounding regions ...

 

Facebook Did not Protect 533 Million Users Data

Maybe these spam calls we get on our cell phones are the consequence.

Hackers were reportedly sharing a massive amount of personal Facebook data in January, and now that data appears to have escaped into the wild. According to Business Insider, security researcher Alon Gal has discovered that a user on a hacking forum has made the entire dataset public, exposing details for about 533 million Facebook members. The data includes phone numbers, birth dates, email addresses and locations, among other revealing info.

About 32 million of the users are in the US, while 11 million are from the UK and another 6 million come from India.

 

Gal first spotted the data in January, when Telegram users could pay to search the database. The intruders reportedly took advantage of a flaw that Facebook fixed in August 2019 and reportedly includes information from before that fix. You might not be in trouble if you’re a relative newcomer or have changed key details in the time since the fix, but the breach still leaves many people vulnerable.

We’ve asked Facebook for comment.

As Gal noted, Facebook can only do so much when the data is already in circulation and the related flaw is no longer an issue. The social network could notify affected users, though, and there’s pressure on the company to alert affected users so they can watch for possible spam calls and fraud.

*** Facebook hack affected 7.3 million Australian accounts

From the Facebook News Room:

The Facts on News Reports About Facebook Data

By Mike Clark, Product Management Director

On April 3, Business Insider published a story saying that information from more than 530 million Facebook users had been made publicly available in an unsecured database. We have teams dedicated to addressing these kinds of issues and understand the impact they can have on the people who use our services. It is important to understand that malicious actors obtained this data not through hacking our systems but by scraping it from our platform prior to September 2019.

Scraping is a common tactic that often relies on automated software to lift public information from the internet that can end up being distributed in online forums like this. The methods used to obtain this data set were previously reported in 2019. This is another example of the ongoing, adversarial relationship technology companies have with fraudsters who intentionally break platform policies to scrape internet services. As a result of the action we took, we are confident that the specific issue that allowed them to scrape this data in 2019 no longer exists. But since there’s still confusion about this data and what we’ve done, we wanted to provide more details here.

What Happened

We believe the data in question was scraped from people’s Facebook profiles by malicious actors using our contact importer prior to September 2019. This feature was designed to help people easily find their friends to connect with on our services using their contact lists.

When we became aware of how malicious actors were using this feature in 2019, we made changes to the contact importer. In this case, we updated it to prevent malicious actors from using software to imitate our app and upload a large set of phone numbers to see which ones matched Facebook users. Through the previous functionality, they were able to query a set of user profiles and obtain a limited set of information about those users included in their public profiles. The information did not include financial information, health information or passwords.

Keeping Your Account Safe

Scraping data using features meant to help people violates our terms. We have teams across the company working to detect and stop these behaviors.

We’re focused on protecting people’s data by working to get this data set taken down and will continue to aggressively go after malicious actors who misuse our tools wherever possible. While we can’t always prevent data sets like these from recirculating or new ones from appearing, we have a dedicated team focused on this work.

While we addressed the issue identified in 2019, it’s always good for everyone to make sure that their settings align with what they want to be sharing publicly. In this case, updating the “How People Find and Contact You” control could be helpful. We also recommend people do regular privacy checkups to make sure that their settings are in the right place, including who can see certain information on their profile and enabling two-factor authentication.

The Only Exhibit Trump Needs for the Senate Impeachment

A big hat tip to Molly Ball for her work on this. This is a very long read. But you will cheat yourself if you don’t read the whole essay and take notes. If you really want to understand the players, the manual and the machine, the timelines and the money and most of all where the power was/is along with all that was mobilized, read on.

Image result for anita gupta biden Anita Gupta, has a long history beginning with Obama

Warning: Anita Gupta now works for Biden at the Justice Department. It is remarkable how media and democrat operatives are so aggressive in defending the election results. It actually comes down to exposure….have your pen and paper handy.

As Trump said, this can never happen again and there is little time left from now to the mid-term election. When Mark Zuckerberg dishes out $400 million for election aid when the Federal government already has big money allocated for that, bigger questions surface. Did any of Zuckerburg’s money pay off judges?

Image result for 2020 election chaos source

TIME: A weird thing happened right after the Nov. 3 election: nothing.

The nation was braced for chaos. Liberal groups had vowed to take to the streets, planning hundreds of protests across the country. Right-wing militias were girding for battle. In a poll before Election Day, 75% of Americans voiced concern about violence.

Instead, an eerie quiet descended. As President Trump refused to concede, the response was not mass action but crickets. When media organizations called the race for Joe Biden on Nov. 7, jubilation broke out instead, as people thronged cities across the U.S. to celebrate the democratic process that resulted in Trump’s ouster.

A second odd thing happened amid Trump’s attempts to reverse the result: corporate America turned on him. Hundreds of major business leaders, many of whom had backed Trump’s candidacy and supported his policies, called on him to concede. To the President, something felt amiss. “It was all very, very strange,” Trump said on Dec. 2. “Within days after the election, we witnessed an orchestrated effort to anoint the winner, even while many key states were still being counted.”

In a way, Trump was right.

Image result for us chamber of commerce

There was a conspiracy unfolding behind the scenes, one that both curtailed the protests and coordinated the resistance from CEOs. Both surprises were the result of an informal alliance between left-wing activists and business titans. The pact was formalized in a terse, little-noticed joint statement of the U.S. Chamber of Commerce and AFL-CIO published on Election Day. Both sides would come to see it as a sort of implicit bargain–inspired by the summer’s massive, sometimes destructive racial-justice protests–in which the forces of labor came together with the forces of capital to keep the peace and oppose Trump’s assault on democracy.

The handshake between business and labor was just one component of a vast, cross-partisan campaign to protect the election–an extraordinary shadow effort dedicated not to winning the vote but to ensuring it would be free and fair, credible and uncorrupted. For more than a year, a loosely organized coalition of operatives scrambled to shore up America’s institutions as they came under simultaneous attack from a remorseless pandemic and an autocratically inclined President. Though much of this activity took place on the left, it was separate from the Biden campaign and crossed ideological lines, with crucial contributions by nonpartisan and conservative actors. The scenario the shadow campaigners were desperate to stop was not a Trump victory. It was an election so calamitous that no result could be discerned at all, a failure of the central act of democratic self-governance that has been a hallmark of America since its founding.

Their work touched every aspect of the election. They got states to change voting systems and laws and helped secure hundreds of millions in public and private funding. They fended off voter-suppression lawsuits, recruited armies of poll workers and got millions of people to vote by mail for the first time. They successfully pressured social media companies to take a harder line against disinformation and used data-driven strategies to fight viral smears. They executed national public-awareness campaigns that helped Americans understand how the vote count would unfold over days or weeks, preventing Trump’s conspiracy theories and false claims of victory from getting more traction. After Election Day, they monitored every pressure point to ensure that Trump could not overturn the result. “The untold story of the election is the thousands of people of both parties who accomplished the triumph of American democracy at its very foundation,” says Norm Eisen, a prominent lawyer and former Obama Administration official who recruited Republicans and Democrats to the board of the Voter Protection Program.

For Trump and his allies were running their own campaign to spoil the election. The President spent months insisting that mail ballots were a Democratic plot and the election would be “rigged.” His henchmen at the state level sought to block their use, while his lawyers brought dozens of spurious suits to make it more difficult to vote–an intensification of the GOP’s legacy of suppressive tactics. Before the election, Trump plotted to block a legitimate vote count. And he spent the months following Nov. 3 trying to steal the election he’d lost–with lawsuits and conspiracy theories, pressure on state and local officials, and finally summoning his army of supporters to the Jan. 6 rally that ended in deadly violence at the Capitol.

The democracy campaigners watched with alarm. “Every week, we felt like we were in a struggle to try to pull off this election without the country going through a real dangerous moment of unraveling,” says former GOP Representative Zach Wamp, a Trump supporter who helped coordinate a bipartisan election-protection council. “We can look back and say this thing went pretty well, but it was not at all clear in September and October that that was going to be the case.”

This is the inside story of the conspiracy to save the 2020 election, based on access to the group’s inner workings, never-before-seen documents and interviews with dozens of those involved from across the political spectrum. It is the story of an unprecedented, creative and determined campaign whose success also reveals how close the nation came to disaster. “Every attempt to interfere with the proper outcome of the election was defeated,” says Ian Bassin, co-founder of Protect Democracy, a nonpartisan rule-of-law advocacy group. “But it’s massively important for the country to understand that it didn’t happen accidentally. The system didn’t work magically. Democracy is not self-executing.”

That’s why the participants want the secret history of the 2020 election told, even though it sounds like a paranoid fever dream–a well-funded cabal of powerful people, ranging across industries and ideologies, working together behind the scenes to influence perceptions, change rules and laws, steer media coverage and control the flow of information. They were not rigging the election; they were fortifying it. And they believe the public needs to understand the system’s fragility in order to ensure that democracy in America endures.

THE ARCHITECT

Sometime in the fall of 2019, Mike Podhorzer became convinced the election was headed for disaster–and determined to protect it.

This was not his usual purview. For nearly a quarter-century, Podhorzer, senior adviser to the president of the AFL-CIO, the nation’s largest union federation, has marshaled the latest tactics and data to help its favored candidates win elections. Unassuming and professorial, he isn’t the sort of hair-gelled “political strategist” who shows up on cable news. Among Democratic insiders, he’s known as the wizard behind some of the biggest advances in political technology in recent decades. A group of liberal strategists he brought together in the early 2000s led to the creation of the Analyst Institute, a secretive firm that applies scientific methods to political campaigns. He was also involved in the founding of Catalist, the flagship progressive data company.

The endless chatter in Washington about “political strategy,” Podhorzer believes, has little to do with how change really gets made. “My basic take on politics is that it’s all pretty obvious if you don’t overthink it or swallow the prevailing frameworks whole,” he once wrote. “After that, just relentlessly identify your assumptions and challenge them.” Podhorzer applies that approach to everything: when he coached his now adult son’s Little League team in the D.C. suburbs, he trained the boys not to swing at most pitches–a tactic that infuriated both their and their opponents’ parents, but won the team a series of championships.

Trump’s election in 2016–credited in part to his unusual strength among the sort of blue collar white voters who once dominated the AFL-CIO–prompted Podhorzer to question his assumptions about voter behavior. He began circulating weekly number-crunching memos to a small circle of allies and hosting strategy sessions in D.C. But when he began to worry about the election itself, he didn’t want to seem paranoid. It was only after months of research that he introduced his concerns in his newsletter in October 2019. The usual tools of data, analytics and polling would not be sufficient in a situation where the President himself was trying to disrupt the election, he wrote. “Most of our planning takes us through Election Day,” he noted. “But, we are not prepared for the two most likely outcomes”–Trump losing and refusing to concede, and Trump winning the Electoral College (despite losing the popular vote) by corrupting the voting process in key states. “We desperately need to systematically ‘red-team’ this election so that we can anticipate and plan for the worst we know will be coming our way.”

It turned out Podhorzer wasn’t the only one thinking in these terms. He began to hear from others eager to join forces. The Fight Back Table, a coalition of “resistance” organizations, had begun scenario-planning around the potential for a contested election, gathering liberal activists at the local and national level into what they called the Democracy Defense Coalition. Voting-rights and civil rights organizations were raising alarms. A group of former elected officials was researching emergency powers they feared Trump might exploit. Protect Democracy was assembling a bipartisan election-crisis task force. “It turned out that once you said it out loud, people agreed,” Podhorzer says, “and it started building momentum.”

He spent months pondering scenarios and talking to experts. It wasn’t hard to find liberals who saw Trump as a dangerous dictator, but Podhorzer was careful to steer clear of hysteria. What he wanted to know was not how American democracy was dying but how it might be kept alive. The chief difference between the U.S. and countries that lost their grip on democracy, he concluded, was that America’s decentralized election system couldn’t be rigged in one fell swoop. That presented an opportunity to shore it up.

THE ALLIANCE

On March 3, Podhorzer drafted a three-page confidential memo titled “Threats to the 2020 Election.” “Trump has made it clear that this will not be a fair election, and that he will reject anything but his own re-election as ‘fake’ and rigged,” he wrote. “On Nov. 3, should the media report otherwise, he will use the right-wing information system to establish his narrative and incite his supporters to protest.” The memo laid out four categories of challenges: attacks on voters, attacks on election administration, attacks on Trump’s political opponents and “efforts to reverse the results of the election.”

Then COVID-19 erupted at the height of the primary-election season. Normal methods of voting were no longer safe for voters or the mostly elderly volunteers who normally staff polling places. But political disagreements, intensified by Trump’s crusade against mail voting, prevented some states from making it easier to vote absentee and for jurisdictions to count those votes in a timely manner. Chaos ensued. Ohio shut down in-person voting for its primary, leading to minuscule turnout. A poll-worker shortage in Milwaukee–where Wisconsin’s heavily Democratic Black population is concentrated–left just five open polling places, down from 182. In New York, vote counting took more than a month.

Suddenly, the potential for a November meltdown was obvious. In his apartment in the D.C. suburbs, Podhorzer began working from his laptop at his kitchen table, holding back-to-back Zoom meetings for hours a day with his network of contacts across the progressive universe: the labor movement; the institutional left, like Planned Parenthood and Greenpeace; resistance groups like Indivisible and MoveOn; progressive data geeks and strategists, representatives of donors and foundations, state-level grassroots organizers, racial-justice activists and others.

In April, Podhorzer began hosting a weekly 2½-hour Zoom. It was structured around a series of rapid-fire five-minute presentations on everything from which ads were working to messaging to legal strategy. The invitation-only gatherings soon attracted hundreds, creating a rare shared base of knowledge for the fractious progressive movement. “At the risk of talking trash about the left, there’s not a lot of good information sharing,” says Anat Shenker-Osorio, a close Podhorzer friend whose poll-tested messaging guidance shaped the group’s approach. “There’s a lot of not-invented-here syndrome, where people won’t consider a good idea if they didn’t come up with it.”

The meetings became the galactic center for a constellation of operatives across the left who shared overlapping goals but didn’t usually work in concert. The group had no name, no leaders and no hierarchy, but it kept the disparate actors in sync. “Pod played a critical behind-the-scenes role in keeping different pieces of the movement infrastructure in communication and aligned,” says Maurice Mitchell, national director of the Working Families Party. “You have the litigation space, the organizing space, the political people just focused on the W, and their strategies aren’t always aligned. He allowed this ecosystem to work together.”

Protecting the election would require an effort of unprecedented scale. As 2020 progressed, it stretched to Congress, Silicon Valley and the nation’s statehouses. It drew energy from the summer’s racial-justice protests, many of whose leaders were a key part of the liberal alliance. And eventually it reached across the aisle, into the world of Trump-skeptical Republicans appalled by his attacks on democracy.

SECURING THE VOTE

The first task was overhauling America’s balky election infrastructure–in the middle of a pandemic. For the thousands of local, mostly nonpartisan officials who administer elections, the most urgent need was money. They needed protective equipment like masks, gloves and hand sanitizer. They needed to pay for postcards letting people know they could vote absentee–or, in some states, to mail ballots to every voter. They needed additional staff and scanners to process ballots.

In March, activists appealed to Congress to steer COVID relief money to election administration. Led by the Leadership Conference on Civil and Human Rights, more than 150 organizations signed a letter to every member of Congress seeking $2 billion in election funding. It was somewhat successful: the CARES Act, passed later that month, contained $400 million in grants to state election administrators. But the next tranche of relief funding didn’t add to that number. It wasn’t going to be enough.

Private philanthropy stepped into the breach. An assortment of foundations contributed tens of millions in election-administration funding. The Chan Zuckerberg Initiative chipped in $300 million. “It was a failure at the federal level that 2,500 local election officials were forced to apply for philanthropic grants to fill their needs,” says Amber McReynolds, a former Denver election official who heads the nonpartisan National Vote at Home Institute.

McReynolds’ two-year-old organization became a clearinghouse for a nation struggling to adapt. The institute gave secretaries of state from both parties technical advice on everything from which vendors to use to how to locate drop boxes. Local officials are the most trusted sources of election information, but few can afford a press secretary, so the institute distributed communications tool kits. In a presentation to Podhorzer’s group, McReynolds detailed the importance of absentee ballots for shortening lines at polling places and preventing an election crisis.

The institute’s work helped 37 states and D.C. bolster mail voting. But it wouldn’t be worth much if people didn’t take advantage. Part of the challenge was logistical: each state has different rules for when and how ballots should be requested and returned. The Voter Participation Center, which in a normal year would have deployed canvassers door-to-door to get out the vote, instead conducted focus groups in April and May to find out what would get people to vote by mail. In August and September, it sent ballot applications to 15 million people in key states, 4.6 million of whom returned them. In mailings and digital ads, the group urged people not to wait for Election Day. “All the work we have done for 17 years was built for this moment of bringing democracy to people’s doorsteps,” says Tom Lopach, the center’s CEO.

The effort had to overcome heightened skepticism in some communities. Many Black voters preferred to exercise their franchise in person or didn’t trust the mail. National civil rights groups worked with local organizations to get the word out that this was the best way to ensure one’s vote was counted. In Philadelphia, for example, advocates distributed “voting safety kits” containing masks, hand sanitizer and informational brochures. “We had to get the message out that this is safe, reliable, and you can trust it,” says Hannah Fried of All Voting Is Local.

At the same time, Democratic lawyers battled a historic tide of pre-election litigation. The pandemic intensified the parties’ usual tangling in the courts. But the lawyers noticed something else as well. “The litigation brought by the Trump campaign, of a piece with the broader campaign to sow doubt about mail voting, was making novel claims and using theories no court has ever accepted,” says Wendy Weiser, a voting-rights expert at the Brennan Center for Justice at NYU. “They read more like lawsuits designed to send a message rather than achieve a legal outcome.”

In the end, nearly half the electorate cast ballots by mail in 2020, practically a revolution in how people vote. About a quarter voted early in person. Only a quarter of voters cast their ballots the traditional way: in person on Election Day.

THE DISINFORMATION DEFENSE

Bad actors spreading false information is nothing new. For decades, campaigns have grappled with everything from anonymous calls claiming the election has been rescheduled to fliers spreading nasty smears about candidates’ families. But Trump’s lies and conspiracy theories, the viral force of social media and the involvement of foreign meddlers made disinformation a broader, deeper threat to the 2020 vote.

Laura Quinn, a veteran progressive operative who co-founded Catalist, began studying this problem a few years ago. She piloted a nameless, secret project, which she has never before publicly discussed, that tracked disinformation online and tried to figure out how to combat it. One component was tracking dangerous lies that might otherwise spread unnoticed. Researchers then provided information to campaigners or the media to track down the sources and expose them.

The most important takeaway from Quinn’s research, however, was that engaging with toxic content only made it worse. “When you get attacked, the instinct is to push back, call it out, say, ‘This isn’t true,’” Quinn says. “But the more engagement something gets, the more the platforms boost it. The algorithm reads that as, ‘Oh, this is popular; people want more of it.’”

The solution, she concluded, was to pressure platforms to enforce their rules, both by removing content or accounts that spread disinformation and by more aggressively policing it in the first place. “The platforms have policies against certain types of malign behavior, but they haven’t been enforcing them,” she says.

Quinn’s research gave ammunition to advocates pushing social media platforms to take a harder line. In November 2019, Mark Zuckerberg invited nine civil rights leaders to dinner at his home, where they warned him about the danger of the election-related falsehoods that were already spreading unchecked. “It took pushing, urging, conversations, brainstorming, all of that to get to a place where we ended up with more rigorous rules and enforcement,” says Vanita Gupta, president and CEO of the Leadership Conference on Civil and Human Rights, who attended the dinner and also met with Twitter CEO Jack Dorsey and others. (Gupta has been nominated for Associate Attorney General by President Biden.) “It was a struggle, but we got to the point where they understood the problem. Was it enough? Probably not. Was it later than we wanted? Yes. But it was really important, given the level of official disinformation, that they had those rules in place and were tagging things and taking them down.”

SPREADING THE WORD

Beyond battling bad information, there was a need to explain a rapidly changing election process. It was crucial for voters to understand that despite what Trump was saying, mail-in votes weren’t susceptible to fraud and that it would be normal if some states weren’t finished counting votes on election night.

Dick Gephardt, the Democratic former House leader turned high-powered lobbyist, spearheaded one coalition. “We wanted to get a really bipartisan group of former elected officials, Cabinet secretaries, military leaders and so on, aimed mainly at messaging to the public but also speaking to local officials–the secretaries of state, attorneys general, governors who would be in the eye of the storm–to let them know we wanted to help,” says Gephardt, who worked his contacts in the private sector to put $20 million behind the effort.