Claim

Olympic Destroyer INVOLVES winlogon.exe

The Olympic attack involved the malicious file winlogon.exe, which repeatedly wiped systems.

Episode
EP 77 — Olympic Destroyer
Origin
Explicit
Confidence
99% (extractor score, not a fact score)
Speaker
Andy Greenberg
Attributed source
—

Transcript evidence

“they’re being wiped again by some piece of malware in their system. They are able to figure out that it’s this one malicious file called winlogon.exe.”

Andy Greenberg · offsets 10290–10441

Read the official transcript

Extraction provenance

Model gpt-5.6-luna · prompt 1.5.19 · schema 1.5.19 · 2026-09-13T06:42:27.785375+00:00

claim:ep077:970024f06b72