Brett says Manos Di took over the eGold account during the keylogger incident.
Explicit Confidence 99% · Brett Johnson EP 129 Details
“He even takes over our eGold account at one point”
Qualified triples from the transcripts. Origin, speaker, and evidence stay attached. These are not independently verified facts.
Brett says Manos Di took over the eGold account during the keylogger incident.
Explicit Confidence 99% · Brett Johnson EP 129 Details
“He even takes over our eGold account at one point”
Operation Angler Fish INVOLVES Brett Johnson
Operation Angler Fish is described as involving Brett’s work for the Secret Service and his subsequent wanted status.
Explicit Confidence 99% · Brett Johnson EP 129 Details
“it’s talking about Operation Angler Fish and the work I’ve done for the Secret Service and how I’m wanted”
Brett Johnson MEMBER_OF United States Secret Service
After his arrest, Brett agreed to work for the Secret Service and was paid to conduct online investigations.
Explicit Confidence 99% · Brett Johnson EP 129 Details
“I started going to work every day for the Secret Service, trying to catch criminals online”
Albert Gonzalez MEMBER_OF Gollumfun
Albert Gonzalez is described as a member of ShadowCrew; the catalog identifies ShadowCrew’s criminal-actor entity as Gollumfun.
Derived Confidence 72% · Jack Rhysider EP 129 Details
“He was a member on ShadowCrew and eventually became the forum techie”
Manos Di POSSIBLY_SAME_AS Max Butler
Brett’s theory is that Manos Di was Max Butler, but he says he does not know this for certain.
Uncertain Confidence 94% · Jack Rhysider EP 129 Details
“My theory is it was Max. I don’t know. Max was the only one competent enough to do it”
Jack Rhysider REFERENCES The Brett Johnson Show
Jack says he first learned Brett’s story by listening to The Brett Johnson Show.
Explicit Confidence 99% · Brett Johnson EP 129 Details
“I first learned about his story by listening to his podcast called The Brett Johnson Show”
Brett Johnson SAME_AS Gollumfun
Jack explicitly refers to Brett as Gollumfun, and the episode presents the two identities as the same person.
Explicit Confidence 99% · Jack Rhysider EP 129 Details
“Brett, or Gollumfun”
Brett Johnson USES Camtasia
While Brett conducted investigations, Secret Service personnel used Camtasia to capture screenshots of activity on his laptop.
Explicit Confidence 99% · Brett Johnson EP 129 Details
“they have Specter Pro and Camtasia on my laptop. So, they’re getting keystrokes and they’re taking snapshots”
Albert Gonzalez USES VPN
Albert set up a VPN and required users to connect through it to access ShadowCrew.
Explicit Confidence 99% · Jack Rhysider EP 129 Details
“Albert set up a VPN and forced users to connect through that to get to the site”
Gollumfun USES prepaid debit cards
Brett repeatedly used prepaid debit cards in connection with tax-refund fraud.
Explicit Confidence 98% · Brett Johnson EP 129 Details
“I take that $30 and I walk my ass to Walmart and I buy a prepaid debit card”
“I’ve got prepaid debit cards”
Gollumfun USES tax return identity theft
Brett says he repeatedly committed tax-return fraud and tax-return identity theft.
Explicit Confidence 99% · Brett Johnson EP 129 Details
“I was probably stealing – probably $20,000 a week doing that on tax return fraud”
Gollumfun USES controlled delivery
A controlled delivery was used to arrest Brett after he ordered food with stolen credit cards.
Explicit Confidence 99% · Brett Johnson EP 129 Details
“So they – it was controlled delivery. I go to pick up the steaks”
Brett attributes the compromise of his accounts and the monitoring of his activity to a keylogger operated by Manos Di.
Explicit Confidence 91% · Brett Johnson EP 129 Details
“I think it’s a keylogger on the system”
“that’s what Manos Di did, was all that”
La Cosa Nostra USES keylogger
The site was reported to have a keylogger that downloaded to visitors and recorded their keystrokes.
Attributed Confidence 98% · Brett Johnson EP 129 Details
“La Cosa Nostra has a keylogger on the site. Anyone who visits the site, a keylogger’s downloaded to it”
Gollumfun USES stolen credit-card fraud
Gollumfun is described as engaging in stolen-credit-card activity.
Explicit Confidence 98% · Jack Rhysider EP 129 Details
“ordering things with stolen credit cards, cashing out on stolen credit cards”
Gollumfun USES social engineering
Brett used social engineering to distract Secret Service agents during an apartment search and conceal illegal items.
Explicit Confidence 99% · Jack Rhysider EP 129 Details
“Brett tricked the Secret Service agents and took advantage of their trust to social engineer them”
Gollumfun USES counterfeit cashier’s checks
After ShadowCrew was shut down, Brett says he used counterfeit cashier’s checks to survive.
Explicit Confidence 99% · Brett Johnson EP 129 Details
“the only thing I’m left doing is running counterfeit cashier’s checks”
Brett Johnson USES Specter Pro
While Brett conducted investigations, Secret Service personnel used Specter Pro to monitor activity on his laptop.
Explicit Confidence 99% · Brett Johnson EP 129 Details
“they have me on a laptop computer ... Meanwhile they have Specter Pro and Camtasia on my laptop”
open cloud storage bucket AFFECTS AWS S3 bucket
The open-bucket vulnerability affected the AWS S3 bucket used to store check images.
Derived Confidence 98% · Jack Rhysider EP 130 Details
“An open AWS bucket means the entire contents of that storage bucket is available for anyone to see”
Ashley Madison breach COMPROMISES Ashley Madison
Jack describes the Ashley Madison breach as a hack that exposed information about the site's users.
Explicit Confidence 97% · Host EP 130 Details
“A major hack tonight is threatening to expose embarrassing information on millions of people around the world”
Jason Haddix EXPLOITS open cloud storage bucket
Jason accessed an open AWS S3 bucket containing check images during the bank assessment.
Explicit Confidence 99% · Jason Haddix EP 130 Details
“it was an open AWS S3 bucket of check images”
Jason Haddix EXPLOITS hard-coded credentials
Jason used credentials hard-coded in a mobile application to access a server's manager console.
Explicit Confidence 99% · Jason Haddix EP 130 Details
“we used these hard-coded credentials that were in the mobile app that we were able to reverse out on this website, and got into that”
Jason Haddix EXPLOITS weak password policy
Jason used the site's five-character password policy to gain access to the target account.
Explicit Confidence 99% · Jason Haddix EP 130 Details
“broke into the account with the image that he wanted through the password reset and the weak password policy”
Jason Haddix EXPLOITS cross-site scripting
Jason found and exploited cross-site scripting bugs on the site.
Explicit Confidence 98% · Jason Haddix EP 130 Details
“We had found a couple of cross-site scripting bugs”
Jason Haddix EXPLOITS SQL injection
Jason found an SQL injection bug that allowed the site's complete database, including purchases and credit-card data, to be dumped.
Explicit Confidence 99% · Jason Haddix EP 130 Details
“we had found that there was an SQL injection bug that allowed us to dump the complete database”