Qualified triples from the transcripts. Origin, speaker, and evidence stay attached. These are not independently verified facts.
Ivan Turchynov USES Backdoor
Ivan planted a PHP script that provided persistent backdoor access to PR Newswire’s network.
Explicit Confidence 99% · Jack Rhysider EP 123 Details
“He left a PHP script there that would give him backdoor access to this place”
Ivan Turchynov USES PHP code exploitation
Ivan exploited PHP code on the PR Newswire website to gain access to its servers.
Explicit Confidence 99% · Jack Rhysider EP 123 Details
“he was able to exploit this PHP code that was on the website to gain access to their servers”
U.S. Securities and Exchange Commission USES Artemis
The SEC used Artemis, an analytics system, to detect suspicious trading patterns.
Explicit Confidence 99% · Jack Rhysider EP 123 Details
“the SEC has a secret weapon called Artemis”
Evaldas Rimasauskas BEC scam INVOLVES lookalike domain
The perpetrators used a domain made to look similar to Quanta's actual domain.
Explicit Confidence 98% · Jack Rhysider EP 124 Details
“he probably registered a domain that was very similar to Quanta’s actual domain”
Evaldas Rimasauskas BEC scam INVOLVES Evaldas Rimasauskas
The incident involved Evaldas Rimasauskas as the person who organized and carried out the scam.
Explicit Confidence 99% · Jack Rhysider EP 124 Details
“Evaldas had his fake invoice, his fake domain, and fake business all set up.”
Evaldas Rimasauskas BEC scam INVOLVES wire fraud
Evaldas pleaded guilty to wire fraud in connection with the scam.
Explicit Confidence 99% · Jack Rhysider EP 124 Details
“Evaldas pleaded guilty to wire fraud”
Evaldas Rimasauskas BEC scam INVOLVES Quanta Computer
The scam impersonated Quanta Computer and redirected payments that were intended for it.
Explicit Confidence 98% · Jack Rhysider EP 124 Details
“he was going to pose as Quanta Computing and issue an invoice to Facebook to pay a bill”
Evaldas Rimasauskas BEC scam INVOLVES Lithuania
The incident involved Lithuania because Evaldas lived there and was arrested by Lithuanian authorities.
Explicit Confidence 99% · Jack Rhysider EP 124 Details
“The Lithuanian authorities arrested Evaldas.”
Evaldas Rimasauskas BEC scam INVOLVES social engineering
The perpetrators used social engineering to gather information about Facebook and Google and their financial processes.
Explicit Confidence 99% · Jack Rhysider EP 124 Details
“they had to do it piece by piece and slowly social-engineer their way into the company”
Evaldas Rimasauskas BEC scam INVOLVES Business E-mail Compromise
The scam used what the episode calls a Business E-mail Compromise, or BEC, scam.
Explicit Confidence 99% · Jack Rhysider EP 124 Details
“Evaldas took this a step further, conducting what’s called a BEC scam.”
Evaldas Rimasauskas BEC scam INVOLVES Federal Bureau of Investigation
The FBI investigated the scam, froze funds, and gathered evidence after being notified by an employee.
Explicit Confidence 99% · Jack Rhysider EP 124 Details
“the employee notified the FBI, and with millions of dollars stolen, the FBI jumped right into action”
Evaldas Rimasauskas BEC scam INVOLVES spoofed e-mails
The scam involved emails made to resemble messages from Quanta and sent to Facebook or Google employees.
Explicit Confidence 90% · Jack Rhysider EP 124 Details
“We’re talking spoofed e-mails, spear phishing, malware attacks”
Evaldas Rimasauskas BEC scam INVOLVES money laundering
The proceeds were moved through multiple bank accounts and countries as part of a money-laundering scheme.
Explicit Confidence 99% · Jack Rhysider EP 124 Details
“Evaldas would just send them fake legal documents that made it look like his money laundering scheme was just normal business dealings.”
Evaldas Rimasauskas BEC scam INVOLVES phishing
Jack characterizes BEC as a phishing attack in which the attacker poses as someone known to the victim.
Explicit Confidence 99% · Jack Rhysider EP 124 Details
“BEC is basically a phishing attack, but you’re posing as someone that the victim knows already.”
Evaldas Rimasauskas BEC scam TARGETS Google
The scam also targeted Google, which was tricked into sending money to Evaldas instead of Quanta.
Explicit Confidence 99% · Jack Rhysider EP 124 Details
“he was able to trick someone at Google to send him money instead of Quanta”
Evaldas Rimasauskas BEC scam TARGETS Facebook
The scam targeted Facebook by diverting payments intended for Quanta into Evaldas's bank account.
Explicit Confidence 99% · Jack Rhysider EP 124 Details
“He put it together and sent the e-mail to the right person at Facebook”
Evaldas Rimasauskas USES lookalike domain
Evaldas allegedly registered a domain similar to Quanta's domain to make the fraudulent emails appear legitimate.
Uncertain Confidence 86% · Jack Rhysider EP 124 Details
“my guess is he probably registered a domain that was very similar to Quanta’s actual domain”
Evaldas Rimasauskas USES social engineering
Evaldas and his team used social engineering to obtain information from Facebook, Google, and related companies.
Explicit Confidence 98% · Jack Rhysider EP 124 Details
“they had to do it piece by piece and slowly social-engineer their way into the company”
Evaldas Rimasauskas USES Business E-mail Compromise
Evaldas conducted a BEC scam to redirect corporate payments.
Explicit Confidence 99% · Jack Rhysider EP 124 Details
“Evaldas took this a step further, conducting what’s called a BEC scam.”
Evaldas Rimasauskas USES WHOIS lookup
Investigators could use a WHOIS lookup to identify who registered and controlled the lookalike domain; the episode does not state that Evaldas used the tool himself.
Attributed Confidence 35% · Jack Rhysider EP 124 Details
“To figure that out, you can do a WHOIS lookup on a domain.”
Evaldas Rimasauskas USES money laundering
Evaldas used a system of moving money through accounts in multiple countries, described as money laundering.
Explicit Confidence 98% · Jack Rhysider EP 124 Details
“he had a whole system to clean the money, too”
Jeremiah Roe ASSOCIATED_WITH BC
Jeremiah worked collaboratively with BC during the physical penetration test.
Explicit Confidence 99% · Jeremiah Roe EP 125 Details
“I was working with another individual. Call him BC. I was working with BC”
Jeremiah Roe ASSOCIATED_WITH OSCP
Jeremiah took and passed the OSCP certification, which the episode describes as testing hacking tools and exploitation techniques.
Explicit Confidence 98% · Jack Rhysider EP 125 Details
“eventually he took the OSCP certification”
unlocked workstation DISCOVERED_BY Jeremiah Roe
Jeremiah and his team found laptops left unlocked and open at employees' desks during the assessment.
Explicit Confidence 99% · Jeremiah Roe EP 125 Details
“individuals who had just kinda walked away from their laptops and left them unlocked and open at their desks”
Jeremiah Roe MEMBER_OF Synack
Jeremiah identifies himself as a solutions architect for Synack; Jack later says he moved to Synack to conduct offensive operations.
Explicit Confidence 99% · Jeremiah Roe EP 125 Details
“my name is Jeremiah Roe and I’m a solutions architect for Synack”