USB Rubber Ducky USES Keystroke injection
The USB Rubber Ducky emulates a keyboard and rapidly injects scripted keystrokes.
Explicit Confidence 99% · MG EP 161 Details
“it does keystroke injection. What that means is it emulates a keyboard”
Qualified triples from the transcripts. Origin, speaker, and evidence stay attached. These are not independently verified facts.
USB Rubber Ducky USES Keystroke injection
The USB Rubber Ducky emulates a keyboard and rapidly injects scripted keystrokes.
Explicit Confidence 99% · MG EP 161 Details
“it does keystroke injection. What that means is it emulates a keyboard”
O.MG cable USES remote shell
The HIDX StealthLink feature can provide a remote shell on a target through a raw data link that appears as a keyboard to the host.
Explicit Confidence 99% · MG EP 161 Details
“you can have a remote shell running on the target that’s on a completely air-gapped machine”
O.MG cable USES geofencing
The O.MG cable supports geofencing and can trigger actions based on detected wireless networks.
Explicit Confidence 99% · MG EP 161 Details
“It can also do some autonomous things like geofencing and triggering things automatically based on wireless networks”
MG USES Red teaming
MG worked in red-team roles, including developing the O.MG cable while doing red-team work.
Explicit Confidence 96% · MG EP 161 Details
“while still doing my red-team role full-time”
O.MG cable USES USB keylogging
The O.MG cable can log keystrokes when placed between a keyboard and a computer.
Explicit Confidence 99% · MG EP 161 Details
“We added USB key-logging a while back”
Mr. Self Destruct USES Keystroke injection
Mr. Self Destruct retained a limited version of USB Rubber Ducky functionality and could run a payload when plugged in.
Derived Confidence 84% · MG EP 161 Details
“I needed to figure out how to make space inside of a thumb drive while retaining Ducky functionality to an extent”
O.MG cable USES mouse injection
The O.MG cable supports mouse injection for navigating and clicking on the host.
Explicit Confidence 99% · MG EP 161 Details
“added some mouse injection as well, so you can navigate a mouse around the screen”
O.MG cable USES persistence via physically attached hardware
In the red-team exercise, the physically attached cable served as persistence despite malware and operating-system cleanup controls.
Explicit Confidence 99% · MG EP 161 Details
“But since they had a cable attached physically at all times, that was the persistence”
Court Ventures ASSOCIATED_WITH Experian
Hieu says Court Ventures was acquired by Experian; Jack places the acquisition in December 2011.
Explicit Confidence 99% · Hieu Minh Ngo EP 162 Details
“Eventually Court Venture, right, they got acquired by the Experian”
“In December 2011, Experian bought Court Ventures”
Equifax breach COMPROMISES Equifax
Jack refers to Equifax as an example of a data broker that was breached.
Explicit Confidence 99% · Jack Rhysider EP 162 Details
“The biggest one is when Equifax got breached”
superget.info DEVELOPED_BY Hieu Minh Ngo
Hieu says the identity-search website was later operated under the superget.info domain.
Derived Confidence 90% · Hieu Minh Ngo EP 162 Details
“then eventually superget.info and findget.me”
findget.me DEVELOPED_BY Hieu Minh Ngo
Hieu says the identity-search website was later operated under the findget.me domain.
Derived Confidence 90% · Hieu Minh Ngo EP 162 Details
“then eventually superget.info and findget.me”
ussearching.info DEVELOPED_BY Hieu Minh Ngo
The episode identifies ussearching.info as the first domain of the website Hieu built to sell identity searches.
Derived Confidence 90% · Hieu Minh Ngo EP 162 Details
“At first that website’s called ussearching.info”
Hieu Minh Ngo DEVELOPED_BY Hieu Minh Ngo
Hieu says he built a website that sold identity lookups; the episode later identifies its successive domains as ussearching.info, superget.info, and findget.me. This self-link is not appropriate; the supported links are represented below as website-to-person claims.
Uncertain Direction flagged Confidence 10% · Hieu Minh Ngo EP 162 Details
“Then I built a website and then I took that website”
hieupc.com DEVELOPED_BY Hieu Minh Ngo
Hieu says he built his first website, hieupc.com.
Explicit Confidence 99% · Hieu Minh Ngo EP 162 Details
“I built my first website, hieupc.com”
Hieu Minh Ngo EXPLOITS SQL injection vulnerability
Hieu exploited SQL injection vulnerabilities in e-commerce sites and data brokers.
Explicit Confidence 99% · Hieu Minh Ngo EP 162 Details
“that website, it got a SQL injection vulnerability”
“First; SQL injection”
Hieu Minh Ngo EXPLOITS file upload vulnerabilities
Hieu says he used file upload vulnerabilities against LocatePLUS and MicroBilt.
Explicit Confidence 99% · Hieu Minh Ngo EP 162 Details
“The second one, the file upload vulnerabilities”
Hieu Minh Ngo MEMBER_OF National Cyber Security Center
After prison, Hieu says he worked for Vietnam’s National Cyber Security Center for four years.
Explicit Confidence 99% · Hieu Minh Ngo EP 162 Details
“I’ve been working there for four years”
ussearching.info USES API
The website allowed users to search Court Ventures data through an API.
Explicit Confidence 99% · Jack Rhysider EP 162 Details
“users could search Court Venture database through the API”
Hieu Minh Ngo USES chip dumping
The episode describes Hieu transferring stolen poker chips between accounts to launder money; Jack identifies this as chip dumping.
Explicit Confidence 97% · Jack Rhysider EP 162 Details
“This technique is called chip dumping”
Hieu Minh Ngo USES Liberty Reserve
Hieu used Liberty Reserve to receive payments for identity searches and launder proceeds.
Explicit Confidence 99% · Hieu Minh Ngo EP 162 Details
“Back then, I didn’t use Bitcoin. We used Liberty Reserve”
Hieu Minh Ngo USES Malware
Hieu used malware delivered through phishing to gain access to a private investigator's computer.
Explicit Confidence 98% · Hieu Minh Ngo EP 162 Details
“I was phishing them to a malware so I can — got into the computer”
Hieu Minh Ngo USES cross-site scripting
Hieu says he used cross-site scripting when attacking the data brokers.
Explicit Confidence 99% · Hieu Minh Ngo EP 162 Details
“and the third one, cross-site scripting”
Hieu Minh Ngo USES OSINT
Hieu used OSINT to compile a list of U.S. data brokers.
Explicit Confidence 99% · Hieu Minh Ngo EP 162 Details
“doing lots of OSINT to get me a list of all the data brokers in the US”
ussearching.info USES Court Ventures
The website used the Court Ventures database as its identity-search data source.
Explicit Confidence 99% · Jack Rhysider EP 162 Details
“users could search Court Venture database through the API”