A pseudonymous Russian coder collective wrote it, a state-adjacent volunteer network gives it away, and it strips the safety and identity controls off consumer drones at industrial scale.
Power on a DJI drone running “1001” and the satellite icon counts itself down, 99, 88, 77, all the way to a white zero. That is the tell. From that moment the aircraft has stopped announcing who and where it is, ignores the no-fly map, shrugs off GPS spoofing, and will climb out of a jammer on its own if the link drops. A commercial camera drone has become a frontline reconnaissance and strike platform, and all it took was a command typed into a text field.
1001 is not sold. It is handed out. A pseudonymous collective writes the code, a state-adjacent volunteer center in Vladimir integrates it and pushes it through a federal grid of workshop terminals, and the network claims half a million airframes flashed and still climbing. Two gains decide the fight: silence against Remote ID and immunity to GPS spoofing, the two cheapest tools a defender owns, taken away for free and faster than attrition can burn the fleet down.
What follows is the primary-source picture, drawn from the group’s own manuals, videos, and rosters: what 1001 does per model and per command, who builds and spreads it, where the install network sits, and where a counter-effort should press first.
T71 1001 Firmware Drone Flashing – Russia
