Major spoilers for Netflix’s six-episode limited series Zero Day. The cyberattack is an inside conspiracy organized by House Speaker Richard Dreyer and fellow lawmakers, including Representative Alex Mullen. Tech billionaire Monica Kidder later gives them a way to distribute modified Proteus malware through her company’s apps. The plotters say they wanted to shock a divided country into unity and restore faith in government; George Mullen ultimately exposes them instead of accepting a cover-up.
This is the 2025 Netflix series created by Eric Newman, Noah Oppenheim and Michael S. Schmidt—not another work with the title Zero Day. Netflix lists it as a six-episode limited series, with the reveal in Episode 6. Netflix’s series page
Who was responsible for the Zero Day attack?
Responsibility is shared across a political conspiracy, a technical enabler and a participating lawmaker—not assigned to a lone hacker or a foreign state. Dreyer and the lawmakers devise and direct the plan; Kidder supplies the distribution route; Alex Mullen takes part, then confesses.
The political organizers
Dreyer leads the plan with a group of lawmakers that includes Representative Alex Mullen. Their stated aim is to unite Americans by creating a crisis that would make people rally around a common cause. Netflix’s finale explainer says the characters describe Congress as having passed no legislation in 18 months; that is an in-story detail, not a real-world statistic.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Scan for outdated or missing drivers - takes under a minuteDriver Scan →#1 Best Overall
The technical enabler
Kidder joins after the political plan is already underway. She offers to use apps owned by her company, Panoply, to distribute the modified malware. The series describes Proteus as an NSA-developed cyber weapon and says it spreads through app updates and then between nearby phones. Those are fictional plot details, not a validated account of real-world malware capabilities.
Netflix Tudum’s Episode 6 explanation lays out the conspirators’ roles and motive.
Alex’s role and explanation
Alex says she expected only a brief “one minute of system shock,” believed the attack would put power in the right hands and restore public faith, and did not intend deaths. That explains how she understood her participation; it does not make her uninvolved. She leaves a confession and says she plans to turn herself in. Megan McCluskey’s TIME breakdown of the ending reports her account and its consequences.
Why did the conspirators launch it?
Their stated motive is political: they believe a shared emergency could unite a divided country and restore trust in government. The scheme is built on the assumption that a crisis can be controlled and its consequences contained. The deaths and damage make clear how badly that assumption fails.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Rank #3
Co-creator and executive producer Eric Newman described the moral point this way: “My hope is that, through this story, people will recognize that just because the intention behind an action is good, the means can’t always justify the end.” The quotation appears in Netflix Tudum’s ending explainer.
What does George Mullen do in the finale?
Dreyer proposes hiding the lawmakers’ roles and blaming Kidder and investor Robert Lyndon. Alex’s letter changes George Mullen’s prepared remarks: he names the conspirators publicly, including his daughter, rather than protect her or accept Dreyer’s bargain.
Netflix’s explainer says Mullen burns his unfinished memoir because his speech—and his decision to tell the truth—will define his legacy more than the book. The final jog by the water suggests he has lost much personally but kept his integrity. The series does not confirm whether his marriage survives; Joan Allen’s interpretation leaves that uncertain.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What is Proteus, and could it work that way in real life?
In the series, Proteus is an NSA-developed cyber weapon that the conspirators modify and use in their attack. The story’s account of malware moving through app updates and between nearby phones belongs to the fiction; it should not be read as a real incident or a demonstrated technical blueprint.
Best Value
The production did draw on specialist input. Netflix reports that cybersecurity consultant Clint Watts and political consultant Eric Schultz worked on the series, and that director Lesli Linka Glatter read Kim Zetter’s Countdown to Zero Day: Stuxnet and the Launch of the World’s First Digital Weapon for inspiration. That production context does not establish that Proteus exists or that the catastrophic scenario unfolds as depicted. In a February 20, 2025 feature, co-creator and executive producer Michael S. Schmidt described the premise as a story about what might happen to the country after another attack on the level of 9/11, and said the creative aim was to show “what a catastrophic cyberattack could look like.” Netflix Tudum’s production and plausibility feature
Did Proteus cause Mullen’s hallucinations?
The series does not settle the cause of Mullen’s cognitive symptoms. He finds suspicious debris, but the lab results are inconclusive. Newman told Netflix Tudum that the creators intended Proteus’s possible use on Mullen to remain open to interpretation; after seeing the finished series, he said he was uncertain himself.
That uncertainty is separate from the attack reveal. The series identifies the political and technical participants, while leaving viewers to weigh whether Proteus interfered with Mullen or whether something else explains his symptoms. Netflix Tudum’s finale explainer and TIME’s ending breakdown discuss the open question.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
