The Kimwolf botnet is described as launching large-scale DDoS attacks and operating as a DDoS-for-hire service.
Explicit Confidence 99% · Jack Rhysider EP 172 Details
“the Kimwolf botnet is a DDOS-as-a-service business.”
Qualified triples from the transcripts. Origin, speaker, and evidence stay attached. These are not independently verified facts.
The Kimwolf botnet is described as launching large-scale DDoS attacks and operating as a DDoS-for-hire service.
Explicit Confidence 99% · Jack Rhysider EP 172 Details
“the Kimwolf botnet is a DDOS-as-a-service business.”
SuperBox USES network scanning
The SuperBox actively scanned and probed other devices on the local network.
Explicit Confidence 99% · D3ada55 EP 172 Details
“they’re doing that discovery when they get on a network to see what’s on the network.”
SuperBox USES Android Debug Bridge
The SuperBox exposes Android Debug Bridge without authentication and allowed a root shell.
Explicit Confidence 99% · D3ada55 EP 172 Details
“there’s no authentication on it. I was able to connect just straight across the Android Debug Bridge”
“it gave me a root shell.”
SuperBox USES TeamViewer
The SuperBox contains TeamViewer, providing a possible remote-management capability.
Explicit Confidence 99% · D3ada55 EP 172 Details
“there’s TeamViewer on it, right? Like, why does it have TeamViewer?”
SuperBox USES ARP denial-of-service
The SuperBox generated enough ARP traffic to overwhelm devices and cause them to lose their IP address reservations.
Explicit Confidence 99% · D3ada55 EP 172 Details
“it was almost more of like an ARP DOS, because it was arping at things so hard that they would freak out and lose their IP address reservation.”
SuperBox USES Address Resolution Protocol
The SuperBox sent ARP requests to every IP address on the local network.
Explicit Confidence 99% · Jack Rhysider EP 172 Details
“this SuperBox was arping out to every IP in D3ada55’ network.”
D3ada55 USES Packet Squirrel
D3ada55 used a Packet Squirrel to perform inline packet captures of the SuperBox traffic.
Explicit Confidence 99% · D3ada55 EP 172 Details
“I got one of those Packet Squirrels from Hak5”
SuperBox USES Residential proxy network
D3ada55 links the boxes’ large bandwidth consumption to residential proxy activity.
Explicit Confidence 97% · D3ada55 EP 172 Details
“Then when you factor in the residential proxy stuff, that’s a lot of bandwidth.”
BadBox 2.0 VARIANT_OF BadBox
The episode says the newer malware was designated BadBox 2.0 even though the first BadBox had been shut down.
Explicit Confidence 99% · Jack Rhysider EP 172 Details
“it’s still BadBox, but it’s BadBox 2.0 even though we had shut down the first BadBox.”
New York ATM cash-out heist ATTRIBUTED_TO Seagate
Jack identifies Seagate as the mastermind behind the broader operation connected to the New York heist.
Explicit Confidence 99% · Loretta Lynch EP 173 Details
“the mastermind behind all this was a guy named Seagate”
New York ATM cash-out heist INVOLVES Elvis
Elvis joined Alberto's cashing crew and participated in the ATM operation.
Explicit Confidence 99% · Jack Rhysider EP 173 Details
“There was Alberto and Elvis and their friends, Amir, Jose, Yael, Chung, Juan, and Evan”
New York ATM cash-out heist INVOLVES prepaid debit cards
The prosecutor described the attackers' use of prepaid debit cards whose account limit had been raised dramatically.
Explicit Confidence 99% · Loretta Lynch EP 173 Details
“They look at prepaid debit cards because they’re not tied to an individual”
New York ATM cash-out heist INVOLVES United States
The heist targeted ATMs and banks in New York City, United States.
Explicit Confidence 99% · Jack Rhysider EP 173 Details
“they stole $2.8 million from banks all across New York”
New York ATM cash-out heist INVOLVES Juan
Juan was one of the eight people in Alberto's crew involved in the ATM heist.
Explicit Confidence 99% · Jack Rhysider EP 173 Details
“There was Alberto and Elvis and their friends, Amir, Jose, Yael, Chung, Juan, and Evan”
New York ATM cash-out heist INVOLVES credit card processors
Loretta Lynch said the operation required compromising or gaining control inside credit-card processors, and that the processor or bank might discover the withdrawals.
Explicit Confidence 98% · Loretta Lynch EP 173 Details
“It takes anywhere from two to eighteen months to execute the kind of control needed to really get inside these credit card processors”
“before the credit card processor or the bank or someone else discovered what they were doing”
New York ATM cash-out heist INVOLVES global crime ring
Authorities described the New York cell as part of a global crime ring.
Attributed Confidence 97% · John EP 173 Details
“authorities say they’re just the New York cell in a global crime ring”
New York ATM cash-out heist INVOLVES card writer
The crew used card-writing equipment while preparing the cards for the heist.
Explicit Confidence 99% · Jack Rhysider EP 173 Details
“they got some blank cards and a writer and started getting ready”
New York ATM cash-out heist INVOLVES Evan
Evan was one of the eight people in Alberto's crew involved in the ATM heist.
Explicit Confidence 99% · Jack Rhysider EP 173 Details
“There was Alberto and Elvis and their friends, Amir, Jose, Yael, Chung, Juan, and Evan”
New York ATM cash-out heist INVOLVES cloned payment card
The heist involved cloned cards made from stolen debit-card details.
Explicit Confidence 97% · Jack Rhysider EP 173 Details
“they can encode that onto a blank card”
New York ATM cash-out heist INVOLVES Jose
Jose was one of the crew members who carried out the ATM withdrawals.
Explicit Confidence 99% · Jack Rhysider EP 173 Details
“Jose was one of the guys in Alberto’s crew”
New York ATM cash-out heist INVOLVES Alberto Yusi Lajud-Pena
Alberto was the organizer and leader of the eight-person New York cashing crew involved in the heist.
Explicit Confidence 99% · Jack Rhysider EP 173 Details
“Alberto had the plans”
“Alberto gave the signal, and people started heading home”
New York ATM cash-out heist INVOLVES Chung
Chung was one of the eight people in Alberto's crew involved in the ATM heist.
Explicit Confidence 99% · Jack Rhysider EP 173 Details
“There was Alberto and Elvis and their friends, Amir, Jose, Yael, Chung, Juan, and Evan”
New York ATM cash-out heist INVOLVES Amir
Amir was one of the eight people in Alberto's crew involved in the ATM heist.
Explicit Confidence 99% · Jack Rhysider EP 173 Details
“There was Alberto and Elvis and their friends, Amir, Jose, Yael, Chung, Juan, and Evan”
New York ATM cash-out heist INVOLVES ATM cashing
The New York heist involved cashers repeatedly withdrawing money from ATMs.
Explicit Confidence 99% · Jack Rhysider EP 173 Details
“All at once these eight cashers from Yonkers walked up to ATMs at banks spread across the city”
New York ATM cash-out heist INVOLVES Yael
Yael was one of the eight people in Alberto's crew involved in the ATM heist.
Explicit Confidence 99% · Jack Rhysider EP 173 Details
“There was Alberto and Elvis and their friends, Amir, Jose, Yael, Chung, Juan, and Evan”