Claims

Qualified triples from the transcripts. Origin, speaker, and evidence stay attached. These are not independently verified facts.

Criminal Screen DEVELOPED_BY Salvatore Verini Jr.

Sal created Criminal Screen as one of his three data-broker websites.

Explicit Confidence 99% · Jack Rhysider EP 177 Details

“He created three almost identical websites; Records Check, Criminal Screen, and the flagship site, National Public Data.”

Jack Rhysider · offsets 28917–29037

Records Check DEVELOPED_BY Salvatore Verini Jr.

Sal created Records Check as one of three nearly identical data-broker websites.

Explicit Confidence 99% · Jack Rhysider EP 177 Details

“He created three almost identical websites; Records Check, Criminal Screen, and the flagship site, National Public Data.”

Jack Rhysider · offsets 28917–29037

Luan Barbosa DISCOVERED_BY CrowdStrike

CrowdStrike investigated USDoD and determined Luan's name, address, phone number, tax registration ID, and other details from his reused email address.

Explicit Direction flagged Confidence 99% · Jack Rhysider EP 177 Details

“CrowdStrike was able to figure out his name, address, phone number, tax registration ID, and more.”

Jack Rhysider · offsets 40130–40228

PEO exploit EXPLOITS Unknown PEO vulnerability

The exploit was built for an unknown vulnerability in the Program Executive Office Enterprise Information System.

Explicit Confidence 99% · Jack Rhysider EP 177 Details

“were able to build an exploit for an unknown vulnerability in the US army IT platform called the Program Executive Office Enterprise Information System”

Jack Rhysider · offsets 15281–15432

National Public Data breach INVOLVES data scraping

The episode describes the breach as involving a scraping company whose purpose was to find and aggregate information about people.

Attributed Confidence 96% · Speaker3 EP 177 Details

“The problem with the NPD data breach is that it is a scraping company that was designed to find out everything it can about you.”

Speaker3 · offsets 34164–34293

Matthew Kierans MEMBER_OF University of Iowa

Matthew obtained a $100,000-a-year IT job at the University of Iowa while using William Woods's identity.

Explicit Confidence 98% · Jack Rhysider EP 177 Details

“Now he got a $100,000-a-year IT job at the University of Iowa”

Jack Rhysider · offsets 3028–3089

Luan Barbosa SAME_AS USDoD

Jack identifies the hacker known as USDoD as Luan Barbosa.

Explicit Confidence 99% · Jack Rhysider EP 177 Details

“his name was Luan Barbosa”

Jack Rhysider · offsets 19640–19665

“USDoD, or Luan”

Jack Rhysider · offsets 20381–20395

USDoD TARGETS Department of Defense

USDoD breached the Department of Defense and published military emails and passwords.

Explicit Confidence 99% · Jack Rhysider EP 177 Details

“That is how he got the hacker name USDoD, by breaching the Department of Defense”

Jack Rhysider · offsets 16430–16510

USDoD TARGETS NATO

USDoD or Luan is described as having broken into a cybersecurity defense center at NATO.

Explicit Confidence 98% · Jack Rhysider EP 177 Details

“Luan, broke into Cybersecurity Defense Center at NATO”

Jack Rhysider · offsets 20391–20444

USDoD TARGETS Airbus

USDoD or Luan is described as having breached Airbus and its vendors.

Explicit Confidence 98% · Jack Rhysider EP 177 Details

“the aerospace company Airbus and their 3,000 vendors”

Jack Rhysider · offsets 20491–20543

USDoD TARGETS InfraGard

USDoD targeted InfraGard, the FBI-linked system for reporting incidents.

Explicit Confidence 99% · Jack Rhysider EP 177 Details

“His next target was InfraGard.”

Jack Rhysider · offsets 16826–16856

“that was the site that USDoD was trying to attack”

Jack Rhysider · offsets 17249–17298

Luan Barbosa USES Doxxing

Luan was doxxed after CrowdStrike and others identified and exposed his personal details, although Jack characterizes the doxxing as initially private.

Explicit Confidence 96% · Jack Rhysider EP 177 Details

“Basically, Luan got doxxed, but privately”

Jack Rhysider · offsets 40229–40270

Matthew Kierans USES identity theft

Matthew stole William Woods's wallet and documents, copied his identity information, and used William's identity for decades.

Explicit Confidence 99% · Jack Rhysider EP 177 Details

“Matthew had started calling himself William Woods.”

Jack Rhysider · offsets 1606–1656

“Matthew had been using William’s identity for thirty-one years”

Jack Rhysider · offsets 5730–5792

USDoD USES data scraping

USDoD used a Python script to retrieve InfraGard members' contact information through the site's API.

Explicit Confidence 99% · Jack Rhysider EP 177 Details

“USDoD asked a friend to write him a Python script to grab the data”

Jack Rhysider · offsets 18947–19013

“he used it to steal every InfraGard member’s contact information”

Jack Rhysider · offsets 19020–19084

National Public Data USES data scraping

National Public Data collected personal information by scraping or acquiring data from brokers, marketing lists, social media, and apps.

Explicit Confidence 99% · Jack Rhysider EP 177 Details

“Sal either bought or scraped data from other data brokers, subscription and marketing lists, loyalty and rewards programs, social media, and other apps.”

Jack Rhysider · offsets 29848–30000

USDoD USES credential reuse

USDoD exploited Sal's reused passwords to move from Records Check into National Public Data.

Explicit Confidence 99% · Jack Rhysider EP 177 Details

“Sal reused passwords, which allowed Luan to log in to National Public Data”

Jack Rhysider · offsets 32902–32976

USDoD USES social engineering

USDoD tried to gain access to the PEO network by impersonating and socially engineering one of its developers.

Explicit Confidence 99% · Jack Rhysider EP 177 Details

“He tried getting access through the developer using social engineering techniques”

Jack Rhysider · offsets 15656–15737

Clearview AI USES data scraping

Clearview AI is described as scraping photographs and information from major social media websites.

Explicit Confidence 98% · Jack Rhysider EP 177 Details

“They were raiding major social media websites. They’d take Facebook, for example, grab every picture and bit of information they could”

Jack Rhysider · offsets 26583–26717

USDoD USES PEO exploit

USDoD accepted a job to help collect military data and worked with Russian hackers in an operation involving an exploit for PEO.

Explicit Confidence 90% · Jack Rhysider EP 177 Details

“USDoD accepted the job”

Jack Rhysider · offsets 15190–15212

“USDoD discovered that a way into this network”

Jack Rhysider · offsets 15468–15513

Garmin ransomware attack ATTRIBUTED_TO Evil Corp

The Garmin ransomware attack is attributed in the episode to Evil Corp.

Explicit Confidence 99% · Jack Rhysider EP 178 Details

“this time by a hacker group called Evil Corp”

Jack Rhysider · offsets 8346–8390

Laura Woods AUTHORED Darknet Diaries

Laura Woods is credited with researching and writing the episode.

Explicit Confidence 96% · Jack Rhysider EP 178 Details

“This episode was researched and written by Clippy’s revenge, Laura Woods.”

Jack Rhysider · offsets 35424–35497

Jack Rhysider AUTHORED Darknet Diaries

Jack Rhysider says he created this episode of Darknet Diaries.

Explicit Confidence 98% · Jack Rhysider EP 178 Details

“This episode was created by me, Mr. Glitchy Pants, Jack Rhysider.”

Jack Rhysider · offsets 35358–35423

Ubiquiti breach COMPROMISES Ubiquiti

The breach involved unauthorized access to Ubiquiti systems and theft of company data.

Explicit Confidence 99% · Jack Rhysider EP 178 Details

“Somebody has been poking around where they shouldn’t have, and data has been exfiltrated”

Jack Rhysider · offsets 21860–21948

CWT ransomware attack COMPROMISES Carlson Wagonlit Travel Company

The CWT ransomware attack compromised Carlson Wagonlit Travel Company’s network and rendered many computers unusable.

Explicit Confidence 99% · Jack Rhysider EP 178 Details

“Then they infected the network with ransomware.”

Jack Rhysider · offsets 7515–7562

“Ransomware rendered a lot of their computers worthless”

Jack Rhysider · offsets 7760–7814

Garmin ransomware attack INVOLVES Ransomware

The Garmin attack involved ransomware.

Explicit Confidence 99% · Jack Rhysider EP 178 Details

“Garmin, the GPS company, gets hit with ransomware, too”

Jack Rhysider · offsets 8290–8344