Claims
Qualified triples from the transcripts. Origin, speaker, and evidence stay attached.
These are not independently verified facts.
ThreatLocker hospital ransomware incident
INVOLVES
Windows
The threat actor gained access to a Windows server and attempted to infect it with ransomware.
Explicit
Confidence 97%
· Jack Rhysider
EP 167
Details
“gained access to a Windows server, tried to infect it with ransomware”
ThreatLocker hospital ransomware incident
INVOLVES
Ransomware
The hospital incident involved an attempted ransomware infection and ultimately a ransom demand and payment.
Explicit
Confidence 98%
· Jack Rhysider
EP 167
Details
“tried to infect it with ransomware, but ThreatLocker denied it”
“this hospital system did end up paying the ransom”
ThreatLocker hospital ransomware incident
INVOLVES
AnyDesk
ThreatLocker blocked AnyDesk, which the threat actor planned to leverage.
Explicit
Confidence 98%
· Hunter Clark
EP 167
Details
“ThreatLocker had blocked the solutions that the threat actor had planned on leveraging, such as AnyDesk and rclone”
ThreatLocker hospital ransomware incident
INVOLVES
rclone
ThreatLocker blocked rclone, which the threat actor planned to leverage.
Explicit
Confidence 98%
· Hunter Clark
EP 167
Details
“such as AnyDesk and rclone”
ThreatLocker manufacturing ransomware incident
INVOLVES
Kanti
The manufacturing-company incident involved Kanti ransomware, which renamed files with the .kanti extension and encrypted systems.
Explicit
Confidence 99%
· Guest
EP 167
Details
“they all end in the word .kanti”
“in the space of fifteen minutes it encrypted all 250 servers”
Danny Jenkins
MEMBER_OF
ThreatLocker
Danny identifies himself as CEO and co-founder of ThreatLocker.
Explicit
Confidence 99%
· Danny Jenkins
EP 167
Details
“I’m CEO and co-founder of ThreatLocker”
Hunter Clark
MEMBER_OF
Ark Technology Consultants
Hunter Clark identifies himself as a cybersecurity engineer at Ark Technology Consultants.
Explicit
Confidence 98%
· Hunter Clark
EP 167
Details
“I’m one of the cybersecurity engineers at Ark Technology Consultants”
Hunter Clark
MEMBER_OF
Ark Technology Consultants
Hunter Clark is a cybersecurity engineer at Ark Technology Consultants.
Explicit
Confidence 98%
· Hunter Clark
EP 167
Details
“I’m one of the cybersecurity engineers at Ark Technology Consultants”
ThreatLocker
USES
application control
ThreatLocker is presented as providing application control by preventing unapproved applications from running.
Explicit
Confidence 98%
· Jack Rhysider
EP 167
Details
“what ThreatLocker does is it says, okay, let’s start by blocking every app from opening and running”
ThreatLocker
USES
application allow-listing
ThreatLocker uses application allow-listing: applications are learned and added to an allow list before secure mode is enabled.
Explicit
Confidence 98%
· Jack Rhysider
EP 167
Details
“you add those apps to the allow list”
Ark Technology Consultants
USES
ThreatLocker
Hunter says he and his team at Ark brought ThreatLocker into the hospital environment they were securing.
Explicit
Confidence 90%
· Jack Rhysider
EP 167
Details
“we brought in ThreatLocker, installed it on all the servers and computers”
ThreatLocker
USES
deny by default
ThreatLocker is described as blocking everything by default unless the application is permitted.
Explicit
Confidence 98%
· Danny Jenkins
EP 167
Details
“I want to change the way the world thinks about security from default allow to default deny”
“we’re gonna block everything”
Kanti
VARIANT_OF
Ransomware
Jack describes Kanti as a type of ransomware.
Explicit
Confidence 99%
· Jack Rhysider
EP 167
Details
“Kanti is a type of ransomware.”
AT&T network outage of January 15, 1990
ASSOCIATED_WITH
Legion of Doom
Police suspected the AT&T outage might have been caused by the Legion of Doom, but the episode says there was no evidence and the cause was uncertain.
Uncertain
Confidence 98%
· Jack Rhysider
EP 168
Details
“The police thought this must be the work of Legion of Doom”
“But was there any evidence?
Some initial reports suggested that there might have been a bug in the system.”
Loyd Blankenship
AUTHORED
Hacker Manifesto
Loyd Blankenship identifies himself as the author of the Hacker Manifesto, written in 1986.
Explicit
Confidence 99%
· Jack Rhysider
EP 168
Details
“That was indeed Loyd Blankenship, the author of the legendary Hacker Manifesto”
Bruce Sterling
AUTHORED
The Hacker Crackdown
Bruce Sterling wrote The Hacker Crackdown.
Explicit
Confidence 99%
· Jack Rhysider
EP 168
Details
“according to Bruce Sterling, the guy who wrote the book The Hacker Crackdown”
Phrack
CONTAINS
The E911 file
Phrack published a redacted version of the E911 document.
Explicit
Direction flagged
Confidence 99%
· Jack Rhysider
EP 168
Details
“on February 25th, 1989, Phrack published this E911 document”
blue box
DEVELOPED_BY
Steve Jobs
Steve Jobs worked with Steve Wozniak to build blue boxes and sell them.
Explicit
Confidence 97%
· Jack Rhysider
EP 168
Details
“worked with Steve Jobs to say, hey, let’s start building these blue boxes and sell them”
blue box
DEVELOPED_BY
Steve Wozniak
Steve Wozniak worked with Steve Jobs to build blue boxes and sell them.
Explicit
Confidence 97%
· Jack Rhysider
EP 168
Details
“Steve Wozniak read that article and worked with Steve Jobs to say, hey, let’s start building these blue boxes and sell them”
Loyd Blankenship
MEMBER_OF
Legion of Doom
Loyd Blankenship was a member of the Legion of Doom.
Explicit
Confidence 99%
· Jack Rhysider
EP 168
Details
“Loyd was a member of one of the most infamous hacker groups of all time, the Legion of Doom”
Lex Luthor
MEMBER_OF
Legion of Doom
Lex Luthor is described as one of the people who started the Legion of Doom.
Explicit
Confidence 96%
· Jack Rhysider
EP 168
Details
“one of the guys who started the LoD hacking group went by the name Lex Luthor”
Ctrl C
MEMBER_OF
Legion of Doom
Ctrl C is described as a long-time member of the Legion of Doom.
Explicit
Confidence 99%
· Jack Rhysider
EP 168
Details
“Long-time Legion of Doom member named Ctrl C saw this”
The Prophet
MEMBER_OF
Legion of Doom
The Prophet is described as a member of the Legion of Doom.
Explicit
Confidence 99%
· Jack Rhysider
EP 168
Details
“Adam’s friend, another member of the LoD called The Prophet”
Phiber Optik
MEMBER_OF
Legion of Doom
Phiber Optik was a member of the Legion of Doom.
Explicit
Confidence 99%
· Jack Rhysider
EP 168
Details
“Phiber Optik was one of the members of Legion of Doom”
How to Regulate the Phone Company in Your Home
MENTIONS
mute box
The Ramparts article explained what a mute box did and how to build and use one.
Explicit
Confidence 98%
· Jack Rhysider
EP 168
Details
“The article goes on to explain — now let’s show you how it’s done, how to make one”