Claims

Qualified triples from the transcripts. Origin, speaker, and evidence stay attached. These are not independently verified facts.

ThreatLocker hospital ransomware incident INVOLVES Windows

The threat actor gained access to a Windows server and attempted to infect it with ransomware.

Explicit Confidence 97% · Jack Rhysider EP 167 Details

“gained access to a Windows server, tried to infect it with ransomware”

Jack Rhysider · offsets 22662–22731

ThreatLocker hospital ransomware incident INVOLVES Ransomware

The hospital incident involved an attempted ransomware infection and ultimately a ransom demand and payment.

Explicit Confidence 98% · Jack Rhysider EP 167 Details

“tried to infect it with ransomware, but ThreatLocker denied it”

Jack Rhysider · offsets 22697–22759

“this hospital system did end up paying the ransom”

Hunter Clark · offsets 26193–26242

ThreatLocker hospital ransomware incident INVOLVES AnyDesk

ThreatLocker blocked AnyDesk, which the threat actor planned to leverage.

Explicit Confidence 98% · Hunter Clark EP 167 Details

“ThreatLocker had blocked the solutions that the threat actor had planned on leveraging, such as AnyDesk and rclone”

Hunter Clark · offsets 22510–22624

ThreatLocker hospital ransomware incident INVOLVES rclone

ThreatLocker blocked rclone, which the threat actor planned to leverage.

Explicit Confidence 98% · Hunter Clark EP 167 Details

“such as AnyDesk and rclone”

Hunter Clark · offsets 22598–22624

ThreatLocker manufacturing ransomware incident INVOLVES Kanti

The manufacturing-company incident involved Kanti ransomware, which renamed files with the .kanti extension and encrypted systems.

Explicit Confidence 99% · Guest EP 167 Details

“they all end in the word .kanti”

Guest · offsets 2618–2649

“in the space of fifteen minutes it encrypted all 250 servers”

Guest · offsets 4678–4738

Danny Jenkins MEMBER_OF ThreatLocker

Danny identifies himself as CEO and co-founder of ThreatLocker.

Explicit Confidence 99% · Danny Jenkins EP 167 Details

“I’m CEO and co-founder of ThreatLocker”

Danny Jenkins · offsets 26731–26769

Hunter Clark MEMBER_OF Ark Technology Consultants

Hunter Clark identifies himself as a cybersecurity engineer at Ark Technology Consultants.

Explicit Confidence 98% · Hunter Clark EP 167 Details

“I’m one of the cybersecurity engineers at Ark Technology Consultants”

Hunter Clark · offsets 19694–19762

Hunter Clark MEMBER_OF Ark Technology Consultants

Hunter Clark is a cybersecurity engineer at Ark Technology Consultants.

Explicit Confidence 98% · Hunter Clark EP 167 Details

“I’m one of the cybersecurity engineers at Ark Technology Consultants”

Hunter Clark · offsets 19694–19762

ThreatLocker USES application control

ThreatLocker is presented as providing application control by preventing unapproved applications from running.

Explicit Confidence 98% · Jack Rhysider EP 167 Details

“what ThreatLocker does is it says, okay, let’s start by blocking every app from opening and running”

Jack Rhysider · offsets 16240–16339

ThreatLocker USES application allow-listing

ThreatLocker uses application allow-listing: applications are learned and added to an allow list before secure mode is enabled.

Explicit Confidence 98% · Jack Rhysider EP 167 Details

“you add those apps to the allow list”

Jack Rhysider · offsets 17212–17248

Ark Technology Consultants USES ThreatLocker

Hunter says he and his team at Ark brought ThreatLocker into the hospital environment they were securing.

Explicit Confidence 90% · Jack Rhysider EP 167 Details

“we brought in ThreatLocker, installed it on all the servers and computers”

Jack Rhysider · offsets 16077–16154

ThreatLocker USES deny by default

ThreatLocker is described as blocking everything by default unless the application is permitted.

Explicit Confidence 98% · Danny Jenkins EP 167 Details

“I want to change the way the world thinks about security from default allow to default deny”

Danny Jenkins · offsets 37663–37754

“we’re gonna block everything”

Danny Jenkins · offsets 26925–26948

Kanti VARIANT_OF Ransomware

Jack describes Kanti as a type of ransomware.

Explicit Confidence 99% · Jack Rhysider EP 167 Details

“Kanti is a type of ransomware.”

Jack Rhysider · offsets 2683–2713

AT&T network outage of January 15, 1990 ASSOCIATED_WITH Legion of Doom

Police suspected the AT&T outage might have been caused by the Legion of Doom, but the episode says there was no evidence and the cause was uncertain.

Uncertain Confidence 98% · Jack Rhysider EP 168 Details

“The police thought this must be the work of Legion of Doom”

Jack Rhysider · offsets 75588–75646

“But was there any evidence? Some initial reports suggested that there might have been a bug in the system.”

Jack Rhysider · offsets 75869–75975

Loyd Blankenship AUTHORED Hacker Manifesto

Loyd Blankenship identifies himself as the author of the Hacker Manifesto, written in 1986.

Explicit Confidence 99% · Jack Rhysider EP 168 Details

“That was indeed Loyd Blankenship, the author of the legendary Hacker Manifesto”

Jack Rhysider · offsets 1690–1768

Bruce Sterling AUTHORED The Hacker Crackdown

Bruce Sterling wrote The Hacker Crackdown.

Explicit Confidence 99% · Jack Rhysider EP 168 Details

“according to Bruce Sterling, the guy who wrote the book The Hacker Crackdown”

Jack Rhysider · offsets 39207–39283

Phrack CONTAINS The E911 file

Phrack published a redacted version of the E911 document.

Explicit Direction flagged Confidence 99% · Jack Rhysider EP 168 Details

“on February 25th, 1989, Phrack published this E911 document”

Jack Rhysider · offsets 66650–66709

blue box DEVELOPED_BY Steve Jobs

Steve Jobs worked with Steve Wozniak to build blue boxes and sell them.

Explicit Confidence 97% · Jack Rhysider EP 168 Details

“worked with Steve Jobs to say, hey, let’s start building these blue boxes and sell them”

Jack Rhysider · offsets 4662–4749

blue box DEVELOPED_BY Steve Wozniak

Steve Wozniak worked with Steve Jobs to build blue boxes and sell them.

Explicit Confidence 97% · Jack Rhysider EP 168 Details

“Steve Wozniak read that article and worked with Steve Jobs to say, hey, let’s start building these blue boxes and sell them”

Jack Rhysider · offsets 4626–4749

Loyd Blankenship MEMBER_OF Legion of Doom

Loyd Blankenship was a member of the Legion of Doom.

Explicit Confidence 99% · Jack Rhysider EP 168 Details

“Loyd was a member of one of the most infamous hacker groups of all time, the Legion of Doom”

Jack Rhysider · offsets 2346–2437

Lex Luthor MEMBER_OF Legion of Doom

Lex Luthor is described as one of the people who started the Legion of Doom.

Explicit Confidence 96% · Jack Rhysider EP 168 Details

“one of the guys who started the LoD hacking group went by the name Lex Luthor”

Jack Rhysider · offsets 32118–32195

Ctrl C MEMBER_OF Legion of Doom

Ctrl C is described as a long-time member of the Legion of Doom.

Explicit Confidence 99% · Jack Rhysider EP 168 Details

“Long-time Legion of Doom member named Ctrl C saw this”

Jack Rhysider · offsets 53989–54042

The Prophet MEMBER_OF Legion of Doom

The Prophet is described as a member of the Legion of Doom.

Explicit Confidence 99% · Jack Rhysider EP 168 Details

“Adam’s friend, another member of the LoD called The Prophet”

Jack Rhysider · offsets 64885–64944

Phiber Optik MEMBER_OF Legion of Doom

Phiber Optik was a member of the Legion of Doom.

Explicit Confidence 99% · Jack Rhysider EP 168 Details

“Phiber Optik was one of the members of Legion of Doom”

Jack Rhysider · offsets 32237–32290

How to Regulate the Phone Company in Your Home MENTIONS mute box

The Ramparts article explained what a mute box did and how to build and use one.

Explicit Confidence 98% · Jack Rhysider EP 168 Details

“The article goes on to explain — now let’s show you how it’s done, how to make one”

Jack Rhysider · offsets 7885–7967