Iran and the U.S., Part Two: Rules of Engagement
46:39 Share

This message comes from NPR sponsor Shopify. No idea where to sell? Shopify puts you in control of every sales channel. It is the commerce platform revolutionizing millions of businesses worldwide. Whether you're a garage entrepreneur or IPO ready, Shopify is the only tool you need to start, run, and grow your business without the struggle. Once you've reached your audience, Shopify has the internet's best converting checkout to help you turn them from browsers to buyers. Go to shopify.com slash NPR to take your business to the next level today.

Hey, it's Rund. The tensions between the United States and Iran are still very much in the headlines. What's happening now is just the latest chapter in a long and nuanced history between the two countries. So today, we're bringing you an episode from our archives. Part one of this series took us to 1953 and the CIA-backed overthrow of Iran's democratically elected prime minister. Today, we pick the story back up in 1979.

The secular Shah the U.S. put in place after the coup in 1953 was suddenly facing a major crisis: an Islamic revolution. For the last seven days, Tehran and other cities have seen violent clashes between troops and demonstrators demanding a raise with rocks and homemade petrol bombs. Hundreds of thousands of protesters took to the streets. Inevitably, the result is massacre. The Shah was forced to flee Iran.

And a new leader, a Muslim cleric named Ayatollah Khomeini, took power. Returns to a country teetering on the brink of civil war. The crowd chanted, "Allah Hu Akbar, God is great," and raced along with the motorcade trying to get a glimpse of the Ayatollah. And this began a new era in U.S.-Iran relations. In an obvious reference to the United States, he said, "Foreign advisors have ruined our culture and have taken our oil." And so, in the course of months,

Iran went from one of America's best allies to one of America's worst adversaries. Not long after the revolution, Iran did something that solidified its new place as an American adversary. The American embassy in Tehran is in the hands of Muslim students tonight.

Spurred on by an anti-American speech by the Ayatollah Khomeini, they stormed the embassy, fought the Marine Guards for three hours, overpowered them, and took dozens of American hostages. Some 60 Americans, including our fellow citizen whom you just saw bound and blindfolded, are now beginning their sixth day of captivity inside the U.S. Embassy in Tehran. It's Friday morning there now.

Over the past 40-plus years, this ongoing antagonism between the two countries has led to violent, even deadly results. In this 2019 episode from our archives, we explored the direct military confrontations, the covert battles, and the 21st century cyberwar between Iran and the United States, and the context behind the moment we're in today.

This message comes from Thuma. Create your oasis with Thuma, a modern design company that specializes in furniture and home goods. By stripping away everything but the essential, Thuma makes elevated beds with premium materials and intentional details. With clean lines, subtle curves, and minimalist style, the Thuma bed collection is available in four signature finishes to match any design aesthetic.

To get $100 towards your first bed purchase, go to thuma.co.npr.

These days, there is a lot of news. It can be hard to keep up with what it means for you, your family, and your community. Consider This from NPR is a podcast that helps you make sense of the news. Six days a week, we bring you a deep dive on a story and provide the context, the backstory, and analysis you need to understand our rapidly changing world. Listen to the Consider This podcast from NPR. Consider This

Iraq claims to have carried out more than 130 air raids yesterday and to have shot down two Iranian jets. Iraq's Saddam Hussein has been active in honouring his army's field commanders, whose string of recent military triumphs tilted the war decisively in Baghdad's favour. It was Saddam Hussein who declared, "Whoever climbs over our fence, we shall climb over his roof."

The Iran-Iraq war was one of the bloodiest wars of the second half of the 20th century. When it was over, after eight years, there was over a million casualties, Iranian and Iraqi casualties.

Relations between Iran and Iraq worsened when the Ayatollahs took over. The Iraqis claimed that the Iranians were refusing to implement border agreements, and the first skirmishes broke out. Iraq invaded Iran on land, and they met with some initial success, especially in the southwest, which was the oil-producing region of Iran. But very quickly, the war effort bogged down, and by 1982, Iran had succeeded in expelling Iraqi forces out of Iran.

And it looked like momentum was working against Iraq in the long term. Iran has a much larger population, larger territorial base. So there were fears on the Iraqi side that eventually if the war dragged on, they would lose. So they tried to escalate and expand the war to include economic warfare. So they targeted Iran's oil industry.

Iran responded in kind and started attacking ships in the Gulf that were going to pick up oil from other Arab countries that were allied to Iraq and providing financial and other help to Iraq as part of its war effort against Iran.

For both countries, oil is the lifeblood of their economy. And so they're trying to sink one another's oil tankers to weaken one another economically. So they attacked using aircraft, helicopters, fixed-wing aircraft, and they also attacked using small boats. The small boats very often would have machine guns, rocket-propelled grenades, or small diameter rockets, 107-millimeter rockets.

So they would pull up in front of a ship going through the Gulf

They would set up in a line in front of the ship's line of movement. And as the ship passed them, they would open fire and rake the hull. And sometimes they would shoot at the bridge where the crew was located. An oil tanker runs the gauntlet of air attacks in the Gulf War. Now the ships, because they are very large tankers and were often double hull, the damage did not cause these ships to sink.

And they were able to continue with their mission, but it imposed costs. It was dangerous for the crews. And that area where Iran and Iraq were fighting, the Strait of Hormuz, is an incredibly crucial geoeconomic chokehold. Once through the entrance, the Straits of Hormuz, the oil tankers face a problem, regardless of their destination.

On any given day, 20 to 40 percent of the world's oil passes through the Strait of Hormuz. And at its narrowest point, it's about 20 miles wide. What's happening is that the war on land between Iran and Iraq is spilling over into the sea, with Western tankers being the sitting targets for both sides. The world cared about what was happening with these tanker wars because it was affecting the price of gasoline throughout the world.

was absolutely crucial to the fate of the global economy. In 1986, 1987, Iran intensified its attacks on Kuwaiti tankers in particular. Kuwait was playing an especially important role in the war as a country that was providing support to Iraq, financial and otherwise providing loans.

They had been asking the United States about the idea of perhaps providing escort for their tankers so that they wouldn't be attacked. And at first we didn't respond with enthusiasm. So the Kuwaitis went to the Russians and the Russians responded almost immediately that they'd be willing to do so. When we heard about that, our response was, well, we're potentially yielding the playing field in the Gulf to the Russians.

And within the context of great power competition during the Cold War, the relationship was seen as a zero-sum game. So that's when the United States got itself involved. From ABC, this is World News Tonight with Peter Jennings.

Good evening. That was an American flag on the back of that ship, and we begin this evening in what is surely the world's most dangerous body of water, the Persian Gulf. The United States actually put its own flag on Kuwaiti tankers as a way of kind of deterring Iran from continuing these attacks. So we were kind of, in effect, protecting our own ships at sea. Sierra Lima India, this is ship 37. I have you on my radar. Please remain.

We set up an arrangement whereby we would have a convoy system where we'd pick up Kuwaiti tankers outside the entrance to the Persian Gulf and escort them for about a day or two until they reached Kuwait, drop them off, and then we would kind of go back and, you know, escort more ships coming in. And so the United States embarks on a Mideast mission which is haunted by one question. Will the Iranians try to attack the Kuwaiti ships now that they are technically American?

It wasn't commonly done, and in fact, it was very controversial. Members of Congress were openly questioning, why are we doing that? Why are we putting American flags on the vessels of other countries? Why are we kind of stretching ourselves so thin and potentially getting involved in a war between two countries which are essentially both adversaries of the United States, Iran and Iraq?

The American assumption had been going into this that

the presence of U.S. warships protecting reflagged ships and the presence of U.S. aircraft carrier in the region would deter the Iranians. We had no prior military experience with the Iranians except for the failed hostage rescue operation a number of years before. We had not had any sustained military interactions with the Iranians and therefore we were kind of like a blank slate. We didn't really know what to expect and we made a lot of assumptions which turned out not to be correct.

when put up against the test of reality. That took a new turn today when American warships shelled and destroyed two Iranian oil platforms and then raided another. Smoke could be seen for 10 miles, but the message was meant for Tehran, 690 miles away. We were engaged in a low-intensity conflict with Iran throughout this period.

which occasionally spiked to involve direct military engagements. It was in retaliation for the weekend missile attack by Iran on an American flag tanker. Iran is believed to have fired the long-range missile which last Friday struck the American flag tanker Sea Isle City, wounding many of her crew.

And increasingly what you see is this conflict zone in which everyone has their finger on the trigger. It's a fog of war, you're at sea, and there's constant risk of miscalculation, there's lack of communication. The Islamic News Agency said the U.S. has become involved in a full-fledged war with Iran. The Iranian president, Ali Khamenei, is quoted as saying, we will retaliate.

The United States expanded its rules of engagement to allow U.S. vessels at sea to come to the aid of ships from other countries that were not part of the reflagging operation but are being attacked by the Iranians. So we're being more proactive in the Gulf in terms of our activities.

There was a newly arrived ship, the USS Vincennes, coming to the region. That was a new class of ship with a radar system that could see further out with greater resolution than the radar systems that were then used by the ships. Their role generally was to kind of hang back and provide a big picture of the air defense environment for the other ships that were operating in the region.

So on July 3rd, 1988... What happened on July 3rd was a Pakistani tanker had come under attack. The Vincennes sent its helicopter to investigate. As it approached the area where the attack was occurring, Iranian ships fired warning shots at the helicopter for it to stay away. The helicopter thought they were under attack and reported it as such. The Vincennes then steamed to the aid of its helicopter...

as well as to join the fight. In doing so, they moved into Iranian territorial waters, which was a violation of U.S. rules of engagement. At the same time, while it's doing this and while it's pursuing the Iranian warships that were involved in the attack against the Pakistani tanker,

An Iranian civilian aircraft takes off from the airport in the city of Bandar Abbas, which is an airfield in a port city in the south of Iran, en route to Dubai in the United Arab Emirates. And what would usually be a 30-minute flight, very easy. And as it turns out, it was flying right over the area in which combat was going on on the surface. And... It takes off...

The crew of the Vincennes thought that this civilian jet was actually an Iranian fighter aircraft that was at first gaining altitude, but then diving to attack. They mistook it for an Iranian military aircraft, and they were trying to communicate with it, but they were using military frequency to communicate with this Iranian plane, and they weren't getting any response because this Iranian plane was a civilian aircraft

airliner which wasn't on a military frequency. So after numerous attempts of trying to communicate with it... They shot two surface-to-air missiles, which brought down the Iranian airliner, killing 290 civilians aboard.

There has been a dramatic and sudden escalation of hostilities in the Persian Gulf involving U.S. forces. There is the possibility that U.S. Navy missiles may have accidentally shot down an Iranian civilian airliner, a civilian airliner carrying nearly 300 people. And so I think the fog of war coupled with both a miscalculation, itchy trigger fingers, and an inability to communicate

resulted in this terrible tragedy. Throughout the morning, there have been very confused reports as to what actually happened. To this day, the Iranian government believes there was no way this was an accident. It was doubtful that the plane that was shot down was an F-14 fighter. Because the plane was clearly marked, its flight pattern was

clearly civilian aircraft headed to Dubai. There's probably dozens of such flights every day between Bandara, Boston, Dubai. But what the U.S. side talks about is the broader context. This U.S. warship was actually receiving fire from what they thought were Iranian warships. There was constant attacks taking place during that time. And so

The United States acknowledged it as a terrible mistake. President Ronald Reagan offered what is known as ex gratia payments, voluntary payments by the United States government to the families of the victims of Iran Air 655 and this settlement today... For Iran these things are not mistakes. Even if America claimed it was a mistake,

The message that was taken by the Iranian side was that this was an act of open hostility. One of the things you often hear today is that there's always a worry about miscalculation in dealing with the Iranians, that there's always the potential for inadvertent escalation as a result of a tragic mistake. On the other hand, I would point out that one of the lessons of this conflict during the latter phases of the Iran-Iraq war is that actually both sides were pretty good at keeping...

the level of conflict within a certain kind of relatively narrow band, that neither side wanted the conflict to spiral out of control and become an even larger war. And they largely succeeded in that regard. Several months later, Iran actually signed the peace treaty to end the Iran-Iraq war. So the shooting down of Flight 655, Iran Air Flight 655, was a terrible tragedy in which civilians were killed.

If you look back, though, at the history, it may have been that the Iran-Iraq war might have lasted longer had that terrible incident not taken place. I think one thing the United States realized by the late 1980s was that the Iranian revolution was not just going to be a flash-in-the-pan phenomenon. You know, that the revolutionary Islam and the Khomeinist ideology that was born out of the 1979 revolution

was going to be an enduring concern. And shortly thereafter, when the Soviet Union collapsed, I think Iran and the threat of radical Islam eclipsed communism as kind of challenge or threat number one for the United States. And I think similarly, one of Iran's takeaways from the Iran-Iraq war and its

interactions with the US military is that the US military's budget is more than 50 times that of Iran's. And so in a head-to-head conventional military matchup, Iran cannot compete with the United States. How it can compete is using essentially asymmetric warfare, whether that's the use of proxies, whether that's the use of mines, in some cases taking hostages.

having plausible deniability. Iran needed to figure out low-cost, high-impact ways to challenge the United States. And it's really honed that ability over the last four decades. That was Karim Sajjadpour, a senior fellow at the Carnegie Endowment for International Peace, and Michael Eisenstadt, director of the Washington Institute's Military and Security Studies program. Coming up, the story of the Shadow War.

The House of Representatives has approved a White House request to claw back two years of previously approved funding for public media. The rescissions package now moves on to the Senate. This move poses a serious threat to local stations and public media as we know it. Please take a stand for public media today at GoACPR.org. Thank you.

Decades ago, Brazilian women made a discovery. They could have an abortion without a doctor, thanks to a tiny pill. That pill spawned a global movement, helping millions of women have safe abortions, regardless of the law. Hear that story on the network, from NPR's Embedded and Futuro Media, wherever you get your podcasts.

This message is from Synchrony Bank, who can help you get your do-nothing savings to work hard with their high-yield savings account. Put your lazy savings to work at synchrony.com slash NPR. Member FDIC. I blame myself for what happened. I was a sergeant of the guard. I was ultimately responsible for the security of that BLT that morning. 0630 on a Sunday morning, Beirut, Lebanon.

Everybody was asleep. We have a bulletin from the Pentagon on the explosion in Beirut at the US Marines barracks. Then I heard the rev of an engine behind me. A truck loaded with explosives broke through a gate into the lobby of a building in Beirut occupied by Marines. I saw the truck come to a stop, dead center of that lobby. Dead silence in the lobby. You could hear a pin drop. And then the next thing I saw was a bright orange flash.

Somebody please help me.

The Pentagon now estimates that 120, possibly more, have been killed. 45 of the more critically wounded have been evacuated. Others remain to be evacuated later. It's been pretty hectic trying to just sort things out and see what the total effect of this tragedy is going to be.

So in 1983, a truck bombing destroys U.S. military marine barracks in Beirut, which was, I think, the deadliest single-day attack on the U.S. Marines since Iwo Jima. Almost 250 Marines were killed.

It was unclear to people who was behind this attack because it was a truck bombing. And, you know, now we become accustomed to suicide bombings. We read about suicide bombings often in the news. But at that time, that was really a novel attack. It was, I think, widely assumed that Iran was responsible, but Iran shrewdly operated via proxy. They tried not to leave fingerprints there.

And, you know, the attack was blamed on a group called Islamic Jihad, which is widely thought to be essentially the precursor to Lebanese Hezbollah. Hezbollah was created to fight Israel, whose army invaded and occupied the country. The emergence of a group called Hezbollah, the Party of God, was essentially a byproduct of two momentous events. One was the 1979 Iranian Revolution, which

and the other was the 1982 Israeli invasion of Lebanon. And so as a result of these two things, all of a sudden the Shia community in Lebanon had an enormous, very wealthy external patron. It is a secretive, militant movement of the Shia sect of Islam, largely funded and armed by Iran. Iran, after the revolution, defined itself in opposition to the United States and in opposition to Israel.

And so you started to see an emergence of Shia radicalism in Lebanon, which Iran was harnessing. And

You know, Lebanon is a country in which America doesn't have enormous strategic assets. It's a very small country on the Mediterranean, but it doesn't have oil resources like Saudi Arabia. So the major reason for America's presence in Lebanon to do peacekeeping and be there as a buffer for our key regional ally, which is Israel. There are no words to properly express our outrage today.

After the bombings of the Marine barracks, I think it caused a real debate within the Reagan administration. Some wanted to pin the blame on Iran. Others said there was no clear proof.

And I think others also realized that if America were to blame Iran directly, then it would warrant action. If you're going to blame Iran for a massive attack on the U.S. Marines, you can't just sit on your hands afterwards. You have to do something about it. And so I think for that reason, there was actually a reluctance within the Reagan administration to

to too aggressively blame Iran because America didn't really want to fight that war. And in hindsight, there are historians who actually criticize the Reagan administration because they say by not responding to that massive attack by Iran against the U.S. Marines, it essentially emboldened Iran. Iran realized that actually suicide bombings can be quite effective, truck bombings can be quite effective,

and eventually led to America's pull out from Lebanon. "Ambassadors Habib and Draper, who were president in Beirut, will continue to press in negotiations for the earliest possible total withdrawal of all external forces." Because, you know, Americans looking at the television said, "Why are our sons and daughters dying in Beirut, Lebanon? What are we doing there? What are our interests?"

And so I think this is a tactic which Iran has used quite effectively, essentially testing the resolve of the United States and in some ways conducting acts of radicalism and terror which will bring in the American public and the American public, you know, calling for either restraint or a pullout from the Middle East.

My fellow citizens, at this hour, American and coalition forces are in the early stages of military operations to disarm Iraq, to free its people, and to defend the world from grave danger. On my orders... When the Iraq war was launched in 2003,

One of the Bush administration's underlying goals for the Iraq war was to create a Shiite democracy in Baghdad, which could then spread to Tehran and undermine the legitimacy of the Iranian regime.

And so for that reason, Iran had every incentive to try to sabotage America's efforts in Iraq if they believed that the Iraq war was intended to eventually overthrow the Iranian government. And so for that reason, from the beginning of the Iraq war, Iran was somewhat cautious the first year or so

But then you started to see Iran ramping up attacks on American troops using proxies, using their Shia militia proxies in Iraq. Iran has essentially tried to franchise the Hezbollah model.

I call it the McDonaldization of Hezbollah, taking that Shia militia franchise in Lebanon and using it in other contexts, whether that's to help fight for your ally Bashar Assad in Syria, Iraqi Shia militias to fight against ISIS and project Iranian power in Iraq.

And now in Yemen. A second day of airstrikes inside Yemen by Saudi jets bombing Iranian-backed Houthi Shia militias, which have taken control of the country. And when we're talking about countries in the region which are experiencing either civil wars or power vacuums,

Iran is able to fill those voids much more effectively with these Shia proxies on the ground. The top U.S. commander for the Middle East worries about what could be Tehran's bid for superpower status. So I think a major asymmetric advantage that Iran has over both the United States and U.S. allies like Saudi Arabia, for example, is that almost all

All Shia radicals in the region, let's say from India to Lebanon, are willing to go out and kill, if not die, for the Islamic Republic of Iran.

Whereas almost all Sunni radicals in the Middle East are deathly opposed to the United States, and they want to actually overthrow the government of Saudi Arabia. You know, groups like al-Qaeda and ISIS are Sunni radicals, which are not Saudi Arabia's proxy. They're actually Saudi Arabia's adversary. And so despite the fact that Shia are outnumbered by Sunni by four or five to one in the region, they're not

Iran has a monopoly over Shia radicalism. And increasingly, not only does Iran operate via proxy, but its proxies also have plausible deniability because they're not necessarily doing the fighting themselves. They're using IEDs. They're using drones. They're using mines. So it gives Iran two layers of deniability. Coming up, how one computer virus started a cyber arms race.

On The Indicator from Planet Money, we like to zoom in on big economic issues like tariffs and crypto and health care. Let's have a health care system where people are kept healthy and not treated only when they're at the most expensive moment when they're sick. Economic deep dives in 10 minutes or less every weekday. Listen to The Indicator from Planet Money wherever you get podcasts.

This message is sponsored by Udemy. If you're looking for new ways to get ahead, then you're Udemy's kind of person. Udemy helps learners like you upskill in AI, productivity, leadership and management, and more. Learn at your own pace from real-world experts. You can also prep for certifications that show employers what you know. Upskill for the career you want at udemy.com.

On NPR's Wildcard podcast, Michelle Obama says she's reinventing herself. I don't know if my ambition has ever fully been able to actualize itself. I think I'm now at a stage in my life where all my choices are mine. I'm Rachel Martin. Listen to Wildcard for a conversation about balancing family and personal growth with Michelle Obama.

An Iranian facility has been targeted for cyber attack, the second time it's happened in less than a year. The worst cyber attack in history. The race between Iranian officials trying to build their nuclear program and outside forces trying to stop it is getting more intense. This new era of warfare has already begun. We have to go all the way back to around 1996, mid-90s, is when the U.S. started to contemplate the development of offensive cyber capabilities.

And right around that time, Iran obtained a batch of illicit uranium hexafluoride gas from China.

And so that's sort of what we can sort of trace the beginnings of the Iranian illicit nuclear program. They, of course, had been watching Iraq prior to that and seeing that Iraq was looking at nuclear capabilities. And of course, Iran and Iraq were longtime enemies. And so Iran's view was if Iraq is looking at obtaining nuclear weapons capability, then we should also be engaging in that as well.

So around 2000, Iran broke ground on the facility at Natanz. U.S. intelligence wasn't, you know, 100% positive about what that facility was going to be, but they were watching it. So February 2003...

the United Nations International Atomic Energy Agency, which is the agency that oversees or monitors nuclear programs around the world. IAE inspectors make their first visit to Natanz. And now we return to Iran, where today UN inspectors visited a site... And they discovered that Iran is actually much farther along in the program than anyone suspected.

They already had a pilot plant set up at Natanz. They had some centrifuges there that they were beginning to assemble. They had said that they hadn't enriched any batch of uranium hexafluoride gas yet, but that turned out to be incorrect. This first process of enriching that first batch was really the beginning step of having enough uranium hexafluoride gas to build a bomb. This is the initial step of getting them to that bomb.

And there was a lot of panic at that point to halt the program until IAEA inspectors could obtain more information. So there was a lot of pressure put on Iran to stop everything. The head of the United Nations nuclear watchdog, the IAEA, in talks with Iranian officials in Tehran. And... The breakthrough. Iran surprisingly actually agreed. Throughout 2003, 2004, and then something changed in 2005. I found it all.

Mahmoud Ahmadinejad was elected president of Iran. And shortly after that, Iran announced that it was done with the cessation agreement and it was no longer going to remain at this stasis position. And it was going to go forward with enriching its first batch of uranium hexafluoride gas. And so you can imagine the panic in Israel when that happens.

Jump forward about six months, on January, February 2006 now, Iran announces that they have enriched their first batch of uranium hexafluoride gas in that pilot plant at Natanz. And then they announced that they had perfected the enrichment process and they were going to begin installing the first centrifuges in the actual enrichment plants.

Israel, of course, was focused on trying to bomb the facility. They had come to the U.S. for permission from President Bush to launch a strike against the Natanz facility, and the U.S. denied that permission and instead had this alternative plan that they wanted to do. So between February 2006 and February 2007, the U.S. is developing and testing Stuxnet.

Stuxnet was what we call a worm. Part of it was virus, part of it was a worm. A worm is malware that will travel from machine to machine without any human interaction. So the initial release, of course, is done by a human. But once a worm finds a vulnerable system, it will infect that system and then it will search automatically for any other system connected to that system on an internal network or over the internet. And then it will search automatically for any other system connected to that system on an internal network or over the internet.

And travel to that system and infect that as well. So you've got this Natanz facility that has critical computers that are air-gapped from the internet. And also the facility itself is physically protected. They had three outer perimeter security walls. Anti-aircraft guns. Earthen berms entirely hide the facility from view.

around the facility. They had fences, they had guards, armed guards, all of that. So the only way that you could get Stuxnet into where you needed to go was to have someone walk it in, deliver it, either wittingly or unwittingly.

And we know that the first version of Stuxnet could only be spread via USB sticks. It's quite possible that the first version of Stuxnet, because it didn't have a lot of spreading capabilities in it, was spread by an inside mole. They probably had close access inside the tons. So 2007, they unleashed that first version of Stuxnet.

It was a partnership between the U.S. and Israel. Their aim wasn't to, it wasn't catastrophic damage. They didn't want to destroy all of the centrifuges. They wanted to simply stop Iran from obtaining enough enriched uranium gas to have a bomb. Iran had a limited supply of uranium hexafluoride gas that it had purchased from China, and they had a limited supply of materials that they could use to manufacture new centrifuges.

And so the goal with Stuxnet was to destroy some of the gas and some of the centrifuges in order to buy time for diplomacy and sanctions to catch up. When Stuxnet first gets on to that S7-417 PLC, it doesn't cause it sabotage right away.

It sits there for a period of time recording the normal operation of those centrifuges and storing that information. And it just keeps storing and storing for days. And when the sabotage kicks in, it takes that information about the normal operations that it stored and it now feeds that back to the monitoring stations. So while the valves are closed and the pressure is increasing inside the centrifuges, the

The engineers at the monitoring stations are seeing that everything is normal. All the valves are open, pressure is normal, heat is normal, nothing is wrong. And so they wouldn't have seen the sabotages happening. What they would have seen, however, is they would have seen that they were losing gas. They would have seen eventually the end result is that the centrifuges start breaking down. But they wouldn't have known if the problem was the machinery itself. Maybe the centrifuges were faulty, the equipment was faulty.

That would have been their first focus. And Stuxnet did one other thing. In addition to feeding that false information to the monitoring stations, Stuxnet froze the safety mechanism on the system. So these automated safety mechanisms were designed to detect if the pressure inside the centrifuges increases, if the heat increases, if they start spinning out of control.

And if it sees that a system is getting out of a safe condition, it's supposed to automatically shut down those centrifuges to prevent them from being destroyed or ruined. But Stuxnet stopped the safety mechanism from working. So Iran was confused. They didn't know what was happening. Thank you. Tapper. We have been through a lot together.

This is a covert operation, and a covert operation has to be authorized by the sitting president. And the sitting president was leaving. We had an election in 2008, and we see in the code that Stuxnet is designed to halt during this temporary phase of when we are losing the sitting president.

And in January 2009, Obama's coming into office and he meets with President Bush. And during this period, Bush explains to him this covert operation, which we now know is called Olympic Games. And he explains what's happening and what it's designed to do and tells him that it's not, it hasn't achieved its full purpose yet and encourages Obama to reauthorize the Olympic Games program. And Obama does.

And we already see in January, the attackers are getting prepared to unleash the second version of their assault. And throughout 2009, it's causing it sabotage. And we actually see signs of the sabotage externally, but we don't know what it is.

The International Atomic Energy Agency is sending inspectors to the Natanz facility on average about twice a month. And they're sending back reports to their headquarters in Vienna. And those reports are saying that Iran is having problems with its centrifuges.

Those inspectors start noticing not just that Iran is having problems, but they're actually removing centrifuges now. So it's not just that they've stopped spinning centrifuges, that they've taken gas out of centrifuges. They're actually removing centrifuges from the Cascades. And they're sending this back in the report. And that's the first sign that Iran has given up. They don't know what's going on. They're checking the equipment. They're checking everything. And...

Yet Stuxnet continues to operate and it continues to engage in sabotage and it's not until June 2010 Stuxnet is unleashed in another round in March and April 2010 and the March version is what got it caught. The March version had multiple spreading mechanisms attached to it including that worm and it spread wildly out of control. It started spreading to machines that weren't the targeted machines.

spreading to any Windows machine that it can find, initially just in Iran. And it started causing problems on machines in Iran outside of Natanz. Someone in Iran who had systems that were kept crashing and rebooting and crashing and rebooting, and they couldn't figure out what was going on. So they contacted the maker of their antivirus software, a company in Belarus called Virus Blockade,

And Virus Block Ada obtained remote access to some of those systems in Iran that were having problems. And they discovered some suspicious code that they believed was causing the machines to reboot, crash and reboot. And so they found this code and they started taking it apart. They immediately discovered that it was malware and that it was designed to spread to any Windows machine.

So they contacted Microsoft because it was using a vulnerability in the Windows software. They contacted Microsoft to have that vulnerability patched. And then they had other files that were dropped onto the machine when it was infected, but those files were encrypted and they couldn't decrypt them. And they didn't have a lot of experience taking malware apart. So they made those files available to the rest of the security community.

And that's when a company called Symantec stepped in and started reverse engineering that code. They were able to decrypt it and they knew that it was designed for sabotage.

Until then, everyone had assumed that this was spyware, that this was conducting espionage. Experts say Stuxnet is an exceptionally sophisticated computer worm that attacks the software used to control automated systems. So if you can imagine, from November 2007 all the way to November 2010, Stuxnet continued to operate unimpeded. Mahmoud Ahmadinejad blamed the Israelis and the US

But Iran didn't do what we expected them to do. They didn't go to the United Nations and complain, and they didn't retaliate, which they would have been in position to do legally. International law sort of limits what a nation can do when it's under digital attack like that. It says that you can take action to halt an attack that's current, but that any sort of retaliation that you do has to be proportional to the attack itself.

And so Iran was pretty limited. And also going to the United Nations, Iran is not very powerful in the United Nations. So it knew that it wasn't going to get the support or backing that it needed to punish the U.S. or Israel. They've never seen anything like it. A massive onslaught of cyber attacks on America's biggest banks, slowing down their websites, even forcing some to shut down temporarily, costing them money. Stuxnet was proof of concept for any nation.

To see that digital capabilities like this are a viable alternative. And so what that has done is it's opened up this new kind of warfare where it's lowered the bar of the actors who can engage in it. Senator Joe Lieberman, then chairman of the Homeland Security Committee, said, I think this was done by Iran. It's likely retaliation for previous cyber attacks on Iran and for other things.

When you drop a conventional weapon, your victim can't pick up those pieces of the weapon and reconstitute it and send it back at you. The difference with a digital weapon is when you're launching a digital weapon, it's fully contained and all the code is there. And so you're sending the blueprint for the weapon to your victim. And all the victim has to do is reverse engineer that weapon in the way that Symantec reverse engineered it and study it and design it in a way that they can send it back to you.

And so what we did was we threw stones from a glass house. In the U.S., we've always had this advantage of geography. We have this distance from our adversaries. But digital warfare erases that distance. Now the front line is on businesses and critical infrastructure here. It's brought the war home.

That was Kim Zetter. She's a cybersecurity reporter and author of the book Countdown to Zero Day, Stuxnet and the Launch of the World's First Digital Weapon. That's it for this week's show. I'm Ramtin Arablui. I'm Randa Adelfattah. And you've been listening to ThruLine from NPR. This show was produced by me. And me. And... Jamie York. Jordana Hochman. Lawrence Wu. Lane Kaplan-Levinson. Okay, smizing summer. Nigeri Eaton.

Original music was produced for this episode by Ramtin and his band, Drop Electric. Thanks also to Aida Porizad and Anya Grunman, and to Entazita, Sarah Wyman, and Amber Chee. If you like something you heard or you have an idea, please write us at ThruLine at NPR.org. Thanks for listening.

This message comes from Sattva. Getting quality sleep can improve athletic abilities, increase energy, and boost memory and learning. Sattva mattresses are designed to promote that kind of sleep. Save $200 on $1,000 or more at sattva.com slash NPR.

This message comes from NPR sponsor Odoo. Some describe Odoo like a magic beanstalk because it scales with you and is magically affordable. Odoo, exactly what a business needs. Sign up at Odoo.com. That's O-D-O-O dot com.

On the Planet Money podcast, the economic world we've been living in for decades was built on some basic assumptions. But the people who built that world are long gone. And right now, those assumptions are kind of up in the air. Like the dollar as the reserve currency. Is that era over? If so, what could replace it? And what does that mean for the rest of us? Listen to the Planet Money podcast from NPR wherever you get your podcasts.