Claims

Qualified triples from the transcripts. Origin, speaker, and evidence stay attached. These are not independently verified facts.

Mubix USES Pivoting

Mubix says the team pivoted into the target network.

Explicit Confidence 97% · Mubix EP 22 Details

“Then we pivot into the network”

Mubix · offsets 6554–6584

Robert M. Lee USES incident response

Robert was called to conduct incident response for a client operating wind turbines.

Explicit Confidence 99% · Robert M. Lee EP 22 Details

“They’re reaching out and calling us to go do an incident response with them”

Robert M. Lee · offsets 15651–15726

Snow USES social engineering

Snow professionally performs social-engineering assessments for companies.

Explicit Confidence 96% · Snow EP 22 Details

“I started my own consultancy and I’ve worked for a handful of companies doing this work professionally”

Snow · offsets 24840–24954

Mubix USES penetration testing

Mubix worked as a penetration tester and used penetration testing in assessments of companies.

Explicit Confidence 99% · Jack Rhysider EP 22 Details

“he was a penetration tester and his job was to hack into companies to test their security”

Jack Rhysider · offsets 2742–2831

Snow USES Vishing

Snow identifies vishing, or voice phishing, as one of her assessment methods.

Explicit Confidence 99% · Snow EP 22 Details

“vishing, with a v, voice phishing”

Snow · offsets 28122–28155

Snow USES phishing

Snow identifies phishing as one of the main types of security assessment she performs.

Explicit Confidence 99% · Snow EP 22 Details

“The main ones that I do are physical security, phishing”

Snow · offsets 28024–28079

Snow USES Open-source intelligence

Snow says she performs open-source intelligence gathering before assessments.

Explicit Confidence 99% · Snow EP 22 Details

“I do a lot of open source intelligence-gathering”

Snow · offsets 28166–28214

Mubix USES Meterpreter

Mubix says the team deployed a Meterpreter session during the test.

Explicit Confidence 97% · Mubix EP 22 Details

“we dump a Meterpreter session on there”

Mubix · offsets 6138–6176

Mubix USES Remote code execution

During the penetration test, Mubix's team found and used remote code execution to obtain a shell on the web server.

Explicit Confidence 94% · Mubix EP 22 Details

“One of our guys on the team finds a remote code execution under one of the web apps”

Mubix · offsets 4822–4905

Buckazoid ASSOCIATED_WITH Vladimir Levin

According to a story Jack says may not be true, Buckazoid told Vladimir Levin about the Citibank access and transfer method, and Vladimir paid him for the information.

Uncertain Confidence 78% · Jack Rhysider EP 23 Details

“The story of Buckazoid and his hacker friend in St. Petersburg may not be true.”

Jack Rhysider · offsets 8395–8474

“he told another computer guy in St. Petersburg named Vladimir Levin what he found”

Jack Rhysider · offsets 7913–7994

online bank robbery ATTRIBUTED_TO Vladimir Levin

The episode attributes the online bank robbery to Vladimir Levin; he later pled guilty and admitted to the conduct.

Explicit Confidence 99% · Jack Rhysider EP 23 Details

“he pled guilty and explained and admitted to everything”

Jack Rhysider · offsets 25101–25156

Jack Rhysider AUTHORED Darknet Diaries

Jack says the show is made by him, identifying him as its creator.

Explicit Confidence 99% · Jack Rhysider EP 23 Details

“This show is made by me, the Karate Skid, Jack Rhysider”

Jack Rhysider · offsets 27689–27744

online bank robbery COMPROMISES Citibank cash management system

Vladimir gained access to and used Citibank’s cash management system to initiate transfers.

Explicit Confidence 98% · Jack Rhysider EP 23 Details

“Vladimir logged into the Citibank cash management system and confirmed he could type commands in it.”

Jack Rhysider · offsets 9000–9086

online bank robbery INITIAL_ACCESS_VIA Sprintnet

The fraudulent activity initially reached Citibank through dial-up access to Sprintnet.

Derived Confidence 88% · Jack Rhysider EP 23 Details

“He dialed into Sprintnet. He logged into the Citibank cash management system”

Jack Rhysider · offsets 9673–9750

online bank robbery INVOLVES Katarina

The incident involved Katarina, who was left in San Francisco to withdraw transferred funds and was arrested by the FBI.

Explicit Confidence 98% · Steve Garfinkel EP 23 Details

“When she came back the following day FBI San Francisco office was waiting for her and arrested her.”

Steve Garfinkel · offsets 17099–17198

online bank robbery INVOLVES Anatoly Lysenkov

The incident involved a man identified at the time as Anatoly Lysenkov, who was arrested in Holland while attempting to collect transferred money.

Explicit Confidence 98% · Steve Garfinkel EP 23 Details

“The Dutch police arrested a Anatoly Lysenkov, the guy who was arrested in Holland picking up money.”

Steve Garfinkel · offsets 21199–21298

online bank robbery INVOLVES Tambov gang

The incident involved members of the Tambov gang, who agreed to finance travel, bank accounts, and collection of transferred funds.

Explicit Confidence 99% · Jack Rhysider EP 23 Details

“The Tambov gang agreed to this plan and would finance the people to fly to foreign countries, set up bank accounts there, and collect the money”

Jack Rhysider · offsets 14437–14580

online bank robbery INVOLVES Yevgeny Korolkov

The incident involved Yevgeny Korolkov, who opened bank accounts and later cooperated with the FBI.

Explicit Confidence 98% · Jack Rhysider EP 23 Details

“This time a guy named Yevgeny Korolkov would travel with his wife to San Francisco and open up numerous bank accounts there.”

Jack Rhysider · offsets 16121–16245

online bank robbery INVOLVES Aleksey Loshmanov

The incident involved Aleksey Loshmanov, who was arrested in Israel while connected to a planned transfer.

Explicit Confidence 98% · Steve Garfinkel EP 23 Details

“The Israeli cops arrested a guy by the name of Aleksey Loshmanov.”

Steve Garfinkel · offsets 15841–15906

online bank robbery INVOLVES Vladimir Levin

The incident involved Vladimir Levin as the principal hacker who conducted the fraudulent transfer attempts.

Explicit Confidence 99% · Jack Rhysider EP 23 Details

“Vladimir Levin attempted forty fraudulent money transfers totalling ten million dollars.”

Jack Rhysider · offsets 25159–25247

online bank robbery INVOLVES FBI

The FBI investigated the fraudulent Citibank transfers and pursued the participants.

Explicit Confidence 99% · Jack Rhysider EP 23 Details

“Citibank quickly called the FBI.”

Jack Rhysider · offsets 11223–11255

“I was a case agent on the Vladimir Levin case.”

Steve Garfinkel · offsets 11457–11503

online bank robbery INVOLVES Citibank

The first online bank robbery involved fraudulent transfers from Citibank systems.

Explicit Confidence 99% · Jack Rhysider EP 23 Details

“the first online bank robbery”

Jack Rhysider · offsets 351–380

“Vladimir logged into the Citibank cash management system”

Jack Rhysider · offsets 9010–9067

Steve Garfinkel MEMBER_OF FBI

Steve Garfinkel says he was an FBI agent for twenty-one years and worked as the case agent on the Levin case.

Explicit Confidence 99% · Steve Garfinkel EP 23 Details

“I’m a retired FBI agent. I spent twenty-one years in the FBI”

Steve Garfinkel · offsets 11391–11452

Phrack MENTIONS Sprintnet

Phrack issue 42 listed known Sprintnet numbers and connection details.

Explicit Confidence 99% · Jack Rhysider EP 23 Details

“issue 42 of Phrack was released and in this issue there was a massive listing of all known Sprintnet numbers”

Jack Rhysider · offsets 3564–3672

Phrack MENTIONS Citibank

Phrack published the online locations of 363 Citibank computers.

Explicit Confidence 99% · Jack Rhysider EP 23 Details

“This issue of Phrack told you the online location of 363 different Citibank computers.”

Jack Rhysider · offsets 4015–4101