This would be far more impressive if not for:

> multiple reports in Slovak media that linked the purchase to a Cyprus shell company with fake certifications.

We're talking about this as if it's some precursor to a James Bond plot, but it really fizzles after learning Nina in the sourcing department skipped the compliance paperwork. James Bond doesn't need to leave the bed!

Trojan exploits aside, I just assume that it'd be easier for someone in SVR/GRU to bribe an admin.