I don’t think that’s true. I’m pretty certain they simply hop on a torrent client with an illegal torrent for their movie and record the IP addresses they see seeding and leeching. Then simply compel the responsible ISP to reveal which of their customers currently has that IP leased.
Kinda odd that a US state official is talking about this in language implying it’s the US’s war? Removes the whole facade that this isn’t US+Ukraine vs Russia that everyone’s pretending isn’t happening.