Sam re-entered his PGP key to authenticate and conduct business on the site.
Explicit Confidence 98% · Jack Rhysider EP 132 Details
“he would have to reload Tails and re-enter his PGP key”
Qualified triples from the transcripts. Origin, speaker, and evidence stay attached. These are not independently verified facts.
Sam re-entered his PGP key to authenticate and conduct business on the site.
Explicit Confidence 98% · Jack Rhysider EP 132 Details
“he would have to reload Tails and re-enter his PGP key”
Sam used Bitcoin for darknet transactions and accepted Bitcoin-only payments.
Explicit Confidence 99% · Sam Bent EP 132 Details
“So, yeah, Bitcoin. Bitcoin only. Yeah, that was it.”
Sam Bent USES information security policies
Sam and his cousin had agreed information-security and incident-response policies for a possible raid.
Explicit Confidence 98% · Sam Bent EP 132 Details
“This was agreed to prior to anything. So, that was the thing; if we get raided, I admit everything was mine”
Sam Bent USES Operational security
Sam relied on operational security practices to protect his identity, keys, communications, and shipping activity.
Explicit Confidence 98% · Sam Bent EP 132 Details
“That’s a part of having good operational security”
Sam posted extensively on Hansa, later became a vendor there, and used the site’s forums and marketplace.
Explicit Confidence 99% · Sam Bent EP 132 Details
“I made 5,000 posts in a month on Hansa”
“I want to become a vendor”
Sam exchanged Bitcoin for Monero and then cashed out the Monero because it was more private and harder to track.
Explicit Confidence 99% · Jack Rhysider EP 132 Details
“he also would exchange his Bitcoin for Monero, which is more private than Bitcoin and harder to track”
PND ASSOCIATED_WITH PND Design
PND was associated with PND Design, although the episode questions whether the affiliation was genuine or itself an impersonation.
Uncertain Confidence 90% · Jack Rhysider EP 133 Details
“PND has a website called PND Design”
John Wu ASSOCIATED_WITH North Korea
Jack says John Wu believed that someone from North Korea may have applied for a job in order to steal cryptocurrency; this is presented as a possibility, not a confirmed attribution.
Uncertain Confidence 82% · Jack Rhysider EP 133 Details
“he thinks that someone from North Korea tried applying for a job”
Connor Tumbleson identity impersonation ASSOCIATED_WITH PND
Connor and Jack suspect PND may be connected to the identity-impersonation activity, but the episode does not establish PND's identity or role with certainty.
Uncertain Confidence 78% · Jack Rhysider EP 133 Details
“Someone, I don’t know, PND, Maris, saw Connor’s GitHub and liked it, and that’s why they took his identity”
Connor Tumbleson identity impersonation INVOLVES Maris
Maris was presented as the person hiring Andrew, although Connor later suspected that the person communicating as Maris was also an impersonator.
Uncertain Confidence 96% · Connor Tumbleson EP 133 Details
“The person Andrew is talking to is not even Maris, because Maris is just another impersonated individual”
Connor Tumbleson identity impersonation INVOLVES Zoom
The impersonator joined the job interview through Zoom.
Explicit Confidence 99% · Connor Tumbleson EP 133 Details
“It, of course, had the Zoom link”
Connor Tumbleson identity impersonation INVOLVES fake online profiles
The incident involved fake online profiles created with Connor's personal and professional information.
Explicit Confidence 99% · Connor Tumbleson EP 133 Details
“it was a fake Upwork of me”
Connor Tumbleson identity impersonation INVOLVES Slack
The participants coordinated and exchanged instructions and evidence through Slack channels.
Explicit Confidence 99% · Connor Tumbleson EP 133 Details
“screenshots of all these Slack channels”
Connor Tumbleson identity impersonation INVOLVES PND
PND instructed Andrew to pretend to be Connor for a job interview and directed activity in a Slack channel.
Explicit Confidence 99% · Connor Tumbleson EP 133 Details
“PND person is a acronym. Ends up posting to Andrew and says, hey, you’re gonna pretend to be this person”
Connor Tumbleson identity impersonation INVOLVES Zillow
The impersonated materials included an address that was for sale on Zillow near Connor's location.
Explicit Confidence 98% · Connor Tumbleson EP 133 Details
“the address was a address that was for sale on Zillow kind of right around where I live”
Connor Tumbleson identity impersonation INVOLVES Upwork
A fake Upwork profile using Connor's information was used to apply for real jobs.
Explicit Confidence 99% · Jack Rhysider EP 133 Details
“Someone made an Upwork profile using Connor’s resume and information”
Connor Tumbleson identity impersonation INVOLVES professional-profile harvesting
Connor believed that other people's information was harvested to create realistic employment profiles.
Uncertain Confidence 96% · Connor Tumbleson EP 133 Details
“their information was harvested to make a real-looking profile”
Connor Tumbleson identity impersonation INVOLVES remote interview impersonation
A person using Connor's identity joined and conducted a remote job interview.
Explicit Confidence 99% · Connor Tumbleson EP 133 Details
“someone pretending to be me in an interview later today”
Connor Tumbleson identity impersonation INVOLVES GitHub
Connor's GitHub profile and coding history were used as attractive source material for the impersonation.
Explicit Confidence 90% · Connor Tumbleson EP 133 Details
“Someone ... saw Connor’s GitHub and liked it, and that’s why they took his identity”
Connor Tumbleson identity impersonation INVOLVES Andrew
Andrew discovered the impersonation scheme, declined to pretend to be Connor, and provided Connor with evidence.
Explicit Confidence 99% · Connor Tumbleson EP 133 Details
“Andrew just ends up leaving and taking a bunch of information with him”
Connor Tumbleson identity impersonation INVOLVES identity impersonation
The incident involved someone pretending to be Connor Tumbleson and using his identity.
Explicit Confidence 99% · Connor Tumbleson EP 133 Details
“it was someone trying to pretend they were me”
Connor says PND might also be Maris, but does not establish that they are the same person.
Uncertain Confidence 94% · Jack Rhysider EP 133 Details
“PND might also be Maris. I don’t know”
Connor Tumbleson USES GitHub
Connor publishes and maintains programming code on GitHub, with a long history of contributions.
Explicit Confidence 99% · Jack Rhysider EP 133 Details
“Connor has published a lot of this code to GitHub”
r/overemployed USES mouse-jigglers
The r/overemployed community discusses using mouse-jigglers to appear productive while away from a keyboard.
Explicit Confidence 98% · Jack Rhysider EP 133 Details
“having mouse-jigglers move your mouse around for you”
PND Design USES Google Analytics
Websites attributed to PND Design reportedly shared the same Google Analytics ID.
Explicit Confidence 94% · Connor Tumbleson EP 133 Details
“they had the same Google Analytics ID”