Cybersecurity Movies: Series
Series that can show an attack end to end: reconnaissance, preparation, mistakes, and consequences.
Part six, the last one. The series format has one advantage: an attack can be shown end to end, with the reconnaissance, the preparation, the mistakes and the consequences.
Mr. Robot (2015-2019)
The accuracy ceiling of the entire list, covered in detail in part one. In short: real tools, a real terminal, consultants from the industry.
Targeted phishing and pretexting, physical implants, attacks on industrial climate control, botnets, encrypting data for ransom, anonymity and its price.
Black Mirror (2011-...)
An anthology where individual episodes work as teaching cases. It makes sense to start with “Shut Up and Dance” and “Hated in the Nation”.
Webcam compromise and extortion based on collected material, vulnerabilities in internet-of-things devices, automated face identification, harassment as a distributed attack, digital legacy and data after a user's death.
Person of Interest (2011-2016)
It starts as a procedural and fairly quickly turns into a show about who controls a total data analysis system.
Mass data collection and predictive analytics, surveillance through cameras and phones, physical intrusion and planting implants, isolating a critical system from the network, a conflict between two systems with different access models.
Devs (2020, miniseries)
A closed division of a technology company and a computing project nobody is allowed to talk about.
Secrecy regimes inside a company, isolating a closed environment and controlling access, employee surveillance, industrial espionage, privacy as a vanishing quantity.
The Undeclared War (2022-...)
An intern at the British signals intelligence agency ends up working a real incident. A second season is announced for 2026.
Reverse engineering malicious code as routine work, attacks on telecommunications infrastructure, incident response at the national level, information operations, and the question of striking back.
Hackerville (2018, miniseries)
A German-Romanian series about the investigation of an attack on a bank in Frankfurt that leads the case to Timisoara. The title refers to the nickname the Western press gave Ramnicu Valcea, the capital of Romanian carding.
Phishing pages and payment data theft, skimming and cashing out, money mules, cross-border investigation and differences between legal systems, the social economy that grows around fraud.
Halt and Catch Fire (2014-2017)
A chronicle of an industry being born, covered in more detail in part one.
Clean-room reverse engineering, the security of early dial-up networks, trust and moderation in the first online communities, user privacy as a product decision.
CSI: Cyber (2015-2016)
A procedural with questionable pacing and predictable twists that has one rare property: across two seasons it works through almost the entire catalogue of everyday threats.
Hacking baby monitors and smart devices, mobile app compromise, identity theft, attacks on automotive electronics, malicious updates, ransomware.
That is the end of the series.
The whole series: