CASE ARCHIVE 01 // MR. ROBOT

Every hack.
Show vs. reality.

A scene-by-scene field guide to Elliot Alderson and fsociety: what happened on screen, the real mechanism beneath it, and the missing steps television cut away.

Explore 33 case files ↓Read the methodology
reality_check.sh

$ analyze --target mr_robot

indexing on-screen operations...

✓ Elliot Alderson

✓ fsociety

✓ seasons 01-04

cases_found   33

highly_realistic 23

reality_score  3.8/5

$

NO HOLLYWOOD MAGIC◆ATTACK CHAINS, NOT RECIPES◆FULL SERIES SPOILERS◆DEFENSE INCLUDED

01 / METHOD

Reality has
more steps.

01

What the show depicts

The visible action and narrative objective, without treating dialogue as proof of the underlying technique.

02

What would be required

The access, trust failures, infrastructure and timing a real operator would need. Explained without weaponized instructions.

03

Where fiction intervenes

The missing reconnaissance, unreliable assumptions, defensive controls and consequences compressed for television.

LAB RULE 00Practice only on systems you own, purpose-built training labs, or environments where you have explicit written authorization.

02 / CASE FILES

The operation index

Select a file for the full attack chain, reality check and defensive takeaway.

33 files
#01S1 E1
Mixed●●●●●

Ron's Coffee and the Tor exit

Operator
Elliot
Target
Rohit Mehta / hidden service
Vector
Network surveillance

Fast coffee-shop Wi-Fi makes Elliot suspicious. He says control of Tor exit nodes gave him control of Ron's traffic and evidence of an illegal site.

A
#02S1 E1
Very plausible●●●●●

Krista's digital life

Operator
Elliot
Target
Krista Gordon
Vector
OSINT and passwords

Elliot assembles a private portrait of his therapist from accounts, relationships, messages and weak passwords.

B
#03S1 E2
Plausible●●●●●

Vera's phone and criminal network

Operator
Elliot
Target
Fernando Vera
Vector
Mobile forensics

Elliot traces Vera's operation through his phone, social accounts and communications, then supplies evidence to police.

C
#04S1 E1
Plausible●●●●●

E Corp's DDoS and hidden rootkit

Operator
fsociety
Target
E Corp / Allsafe
Vector
DDoS and persistence

A large denial-of-service attack masks deeper access. Elliot finds a malicious rootkit and a message inviting him to conceal the real attackers.

D
#05S1 E1
Mixed●●●●●

The Colby attribution switch

Operator
Elliot
Target
Terry Colby
Vector
Evidence tampering

Elliot alters the evidence file so the attack appears to originate from E Corp executive Terry Colby.

E
#06S1 E4
Very plausible●●●●●

Steel Mountain reconnaissance

Operator
Elliot + fsociety
Target
Steel Mountain
Vector
Physical social engineering

The team researches employees and facilities, fabricates a pretext, enters the records site and positions a tiny computer inside.

F
#07S1 E4
Mixed●●●●●

The climate-control attack

Operator
fsociety
Target
Steel Mountain tape archive
Vector
Industrial control

A planted device is intended to manipulate climate controls until backup tapes become unusable.

G
#08S1 E6
Dramatized●●●●●

Vera's prison break

Operator
Elliot
Target
Prison control systems
Vector
Operational technology

Under coercion, Elliot compromises the jail network and causes multiple cell doors to open.

H
#09S1 E5
Plausible●●●●●

The infected media gambit

Operator
fsociety
Target
Allsafe employee
Vector
Removable-media intrusion

Malicious removable media is placed where curiosity or routine might bring it inside a trusted company.

I
#10S1 E9
Mixed●●●●●

The Five/Nine attack

Operator
Elliot + fsociety
Target
E Corp's financial records
Vector
Destructive enterprise intrusion

fsociety encrypts E Corp's financial data while the physical backups are destroyed, attempting to erase consumer debt.

J
#11S1 E10
Plausible●●●●●

Tracing the planted Raspberry Pi

Operator
Elliot
Target
fsociety's own infrastructure
Vector
Forensic reconstruction

After losing time and memory, Elliot reconstructs pieces of the operation from devices, logs and people around him.

K
#12S2 E1
Plausible●●●●●

The police-station USB attack

Operator
fsociety
Target
Police systems
Vector
HID injection

Darlene uses a disguised USB device that behaves like a keyboard and rapidly enters commands on a police workstation.

L
#13S2 E6
Plausible●●●●●

The FBI femtocell operation

Operator
fsociety
Target
FBI phones inside E Corp
Vector
Cellular interception

Angela carries a programmed femtocell into the FBI's temporary office so nearby phones connect through infrastructure controlled by fsociety.

M
#14S2 E6
Plausible●●●●●

Android phone surveillance

Operator
fsociety
Target
FBI investigators
Vector
Mobile compromise

Compromised phones become microphones and intelligence sources for fsociety's surveillance of the FBI investigation.

N
#15S2 E1
Very plausible●●●●●

Susan Jacobs' smart-home lockout

Operator
fsociety
Target
Susan Jacobs
Vector
IoT compromise

fsociety takes over lights, audio, alarms, temperature and access systems until the homeowner abandons the property.

O
#16S2 E1
Plausible●●●●●

Bank of E ransomware demand

Operator
fsociety
Target
Bank of E
Vector
Extortion

fsociety compromises a bank, demands a cash ransom and stages a public destruction of the money.

P
#17S2 E8
Plausible●●●●●

The E Corp backdoor and Stage 2

Operator
Elliot
Target
E Corp recovery environment
Vector
Persistence

Elliot discovers that his own malware has been modified to maintain access and support a second, more destructive operation.

Q
#18S2 E5
Plausible●●●●●

Ray's hidden marketplace

Operator
Elliot
Target
Ray's Tor marketplace
Vector
Server compromise

Elliot repairs and then investigates a Tor marketplace, discovers its criminal purpose and redirects evidence toward authorities.

R
#19S2 E9
Mixed●●●●●

Tracing Joanna's mysterious calls

Operator
Elliot
Target
Joanna Wellick's caller
Vector
Telecom attribution

Elliot analyzes repeated calls and phone-network clues to determine who is contacting Joanna.

S
#20S2 E10
Plausible●●●●●

The Sentinel case-file theft

Operator
fsociety
Target
FBI investigation data
Vector
Data exfiltration

The femtocell and compromised devices expose the FBI's surveillance map, later released as the Sentinel leak.

T
#21S3 E3
Mixed●●●●●

Stage 2 and UPS firmware

Operator
Elliot
Target
E Corp paper-record facilities
Vector
Cyber-physical sabotage

A plan involving compromised power equipment and concentrated paper records is designed to trigger catastrophic destruction.

U
#22S3 E8
Plausible●●●●●

Elliot's recovery keys

Operator
Elliot
Target
Five/Nine encrypted data
Vector
Cryptographic recovery

Elliot reveals that he retained material capable of restoring the data damaged during Five/Nine.

V
#23S3 E5
Very plausible●●●●●

E Corp internal pivot

Operator
Elliot
Target
E Corp network
Vector
Insider access

As an employee, Elliot navigates internal systems, defeats controls and races to stop Stage 2.

W
#24S3 E6
Plausible●●●●●

Remote access versus physical reality

Operator
Elliot
Target
Dark Army's Stage 2 controls
Vector
Remote administration

Elliot attempts to revoke access and stop the cyber component, only to learn that the operation has redundant human and physical pathways.

X
#25S4 E1
Plausible●●●●●

Virtual Realty server-room intrusion

Operator
Elliot + fsociety
Target
Virtual Realty hosting facility
Vector
Physical and network intrusion

Elliot and Darlene combine reconnaissance, impersonation and physical access to reach infrastructure tied to a financial target.

Y
#26S4 E1
Plausible●●●●●

The apartment honeypot

Operator
Elliot
Target
Freddy Lomax
Vector
Coercive compromise

A compromised professional is confronted with detailed evidence and forced to provide access that leads farther into the conspiracy.

Z
#27S4 E3
Very plausible●●●●●

Olivia and Cyprus National Bank

Operator
Elliot
Target
Olivia Cortez / Cyprus National Bank
Vector
Human targeting

Elliot researches a bank employee, engineers a personal encounter and later coerces her into helping bypass access controls.

A
#28S4 E4
Plausible●●●●●

Phone-location pursuit

Operator
Elliot + fsociety
Target
Dark Army operative
Vector
Device tracking

Elliot and Tyrell use phone and network traces while events in the woods complicate the digital trail.

B
#29S4 E5
Plausible●●●●●

Virtual Realty credential chase

Operator
Elliot + fsociety
Target
Virtual Realty / Deus infrastructure
Vector
Credential theft

A physical break-in becomes a race to extract server access and escape before police close in.

C
#30S4 E7
Very plausible●●●●●

Vera weaponizes Krista's records

Operator
Elliot
Target
Krista and Elliot
Vector
Information exploitation

Private therapeutic information and personal history become tools for manipulation, coercion and psychological control.

D
#31S4 E9
Mixed●●●●●

The Deus Group phone harvest

Operator
Elliot + fsociety
Target
Deus Group members
Vector
Authentication interception

Members are gathered in one location while Darlene uses their nearby phones and bank authentication flow to authorize a mass transfer.

E
#32S4 E9
Dramatized●●●●●

Draining Cyprus National Bank

Operator
Elliot + fsociety
Target
Deus Group financial accounts
Vector
Financial systems

The authenticated transfers rapidly redistribute the Deus Group's hidden wealth and destroy its financial power.

F
#33S4 E11
Dramatized●●●●●

Washington Township plant access

Operator
Elliot
Target
Whiterose's machine and plant network
Vector
Critical infrastructure

Elliot enters a nuclear facility during an armed takeover, reaches a control room and deploys malware intended to stop Whiterose's machine.

G

03 / REALITY SCALE

Believable does not
mean effortless.

1Fiction-firstThe objective or mechanism breaks important technical constraints.
2DramatizedA real concept with major dependencies or safeguards removed.
3MixedThe core could work, but the scene skips a decisive link.
4PlausibleCredible with preparation, access and some good fortune.
5Very plausibleA recognizable technique defenders encounter in the real world.