AlphaBay accepted Ethereum for transactions.
Explicit Confidence 99% · Jack Rhysider EP 24 Details
“Only Bitcoin, Monero, and Ethereum were accepted.”
Qualified triples from the transcripts. Origin, speaker, and evidence stay attached. These are not independently verified facts.
AlphaBay accepted Ethereum for transactions.
Explicit Confidence 99% · Jack Rhysider EP 24 Details
“Only Bitcoin, Monero, and Ethereum were accepted.”
AlphaBay accepted Bitcoin for transactions.
Explicit Confidence 99% · Jack Rhysider EP 24 Details
“Only Bitcoin, Monero, and Ethereum were accepted.”
AlphaBay accepted Monero for transactions.
Explicit Confidence 99% · Jack Rhysider EP 24 Details
“Only Bitcoin, Monero, and Ethereum were accepted.”
FBI undercover agents created accounts and bought drugs and other goods on AlphaBay during the investigation.
Explicit Confidence 99% · Jack Rhysider EP 24 Details
“The FBI was having trouble finding any clues at all so they went onto AlphaBay and started buying drugs.”
Alberto Hill ASSOCIATED_WITH CERT of Uruguay
Alberto reported the discovered medical-provider vulnerability to the Uruguayan CERT, which confirmed that the problem existed.
Explicit Confidence 99% · Alberto Hill EP 25 Details
“I immediately sent an e-mail to the CERT of Uruguay.”
“In two hours they replied to me and they say okay, [00:10:00] it is confirmed.”
medical-provider patient-record extortion ATTRIBUTED_TO Alberto Hill
Uruguayan police and the courts attributed the medical-provider hack and extortion to Alberto, but Alberto repeatedly denied doing it and Jack questions whether the wrong person was convicted.
Attributed Confidence 93% · Jack Rhysider EP 25 Details
“Alberto was found guilty and he was being sent to a long-term prison”
“I did not do it. I didn’t do it and I am innocent.”
“which is probably why in the end they caught the wrong guy”
Jack Rhysider AUTHORED Darknet Diaries
Jack identifies himself as the creator of Darknet Diaries.
Explicit Confidence 98% · Jack Rhysider EP 25 Details
“This show is created by me, La Sombra, Jack Rhysider”
La Sombra AUTHORED Darknet Diaries
The outro credits La Sombra as one of the creators of Darknet Diaries.
Explicit Confidence 98% · Jack Rhysider EP 25 Details
“This show is created by me, La Sombra, Jack Rhysider”
medical-provider patient-record extortion COMPROMISES medical provider
The incident involved an attacker breaking into the medical provider's website, accessing its database, and taking patient records.
Explicit Confidence 99% · Jack Rhysider EP 25 Details
“The hacker broke in through the provider’s website, accessed the database and took a ton of patient records.”
admin/admin default credentials DISCOVERED_BY Alberto Hill
Alberto discovered that the medical provider's website accepted admin/admin as administrator credentials.
Explicit Confidence 99% · Jack Rhysider EP 25 Details
“Just for fun he tried to log in as the username admin with the password admin and it worked.”
Alberto Hill EXPLOITS admin/admin default credentials
Alberto used the admin/admin default credentials to access the medical facility's systems while investigating and reporting the vulnerability.
Explicit Confidence 98% · Alberto Hill EP 25 Details
“I mean, admin/admin, and I had access to all the systems”
medical-provider patient-record extortion INITIAL_ACCESS_VIA website compromise
The attacker initially gained access through the medical provider's website.
Explicit Confidence 99% · Jack Rhysider EP 25 Details
“The hacker broke in through the provider’s website”
medical-provider patient-record extortion INVOLVES Data exfiltration
The attacker accessed the database and took patient records.
Explicit Confidence 99% · Jack Rhysider EP 25 Details
“accessed the database and took a ton of patient records”
medical-provider patient-record extortion INVOLVES extortion
The attacker demanded Bitcoin and threatened to release confidential patient information, including details about people with HIV and cancer.
Explicit Confidence 99% · Jack Rhysider EP 25 Details
“sent a ransom e-mail to the medical providers showing they had confidential data and demanded they pay fifteen Bitcoin”
Alberto Hill MEMBER_OF Interpol
Jack says Alberto previously worked with Interpol conducting digital forensics.
Explicit Confidence 90% · Jack Rhysider EP 25 Details
“Before that Alberto was working with Interpol doing digital forensics.”
Operation Bitcoins SAME_AS medical-provider patient-record extortion
Jack says the police called the medical-provider extortion case Operation Bitcoins.
Explicit Confidence 96% · Jack Rhysider EP 25 Details
“They contacted the police who called this case Operation Bitcoins.”
Alberto Hill USES proxy
After his release, Alberto says he used a proxy when finding security problems and chose not to report them.
Explicit Confidence 99% · Alberto Hill EP 25 Details
“Of course I was connecting with a VPN and a proxy”
Alberto Hill USES VPN
After his release, Alberto says he used a VPN when finding security problems and chose not to report them.
Explicit Confidence 99% · Alberto Hill EP 25 Details
“Of course I was connecting with a VPN and a proxy”
Internal Revenue Service ASSOCIATED_WITH Equifax
Jack says the IRS partnered with a major credit reporting company such as Equifax to obtain identity information for KBA.
Uncertain Confidence 88% · Jack Rhysider EP 26 Details
“The IRS partners with one of the big credit reporting companies like EquiFax”
National Institute of Standards and Technology ASSOCIATED_WITH Instant knowledge-based authentication
NIST specifically commented on the privacy risks of instant KBA, stating that involuntary exposure is inappropriate unless the risk is nearly zero.
Attributed Confidence 98% · Jack Rhysider EP 26 Details
“NIST, a government-ran standards board, comments on this specifically”
IRS Get Transcript breach ATTRIBUTED_TO Russia
News reports indicated that the identity thieves may have been in Russia; this attribution was explicitly presented as uncertain and incomplete.
Uncertain Confidence 91% · Jack Rhysider EP 26 Details
“News reports indicate that the recent IRS identity thieves may have been in Russia.”
IRS Get Transcript breach DISCOVERED_BY Internal Revenue Service
The IRS security center discovered the suspicious activity and later identified the unauthorized access.
Explicit Confidence 98% · Jack Rhysider EP 26 Details
“our cyber-security team noticed unusual activity on the Get Transcript application”
IRS Get Transcript breach INITIAL_ACCESS_VIA Get Transcript
The attackers initially accessed taxpayer information by navigating through the Get Transcript authentication process.
Explicit Confidence 96% · Jack Rhysider EP 26 Details
“They simply found a way to navigate through the authentication system”
IRS Get Transcript breach INVOLVES Get Transcript
The IRS breach involved attackers using the Get Transcript feature to obtain taxpayer records.
Explicit Confidence 99% · Jack Rhysider EP 26 Details
“The thieves successfully used the Get Transcript feature of the irs.gov website to obtain the tax records of 100,000 people.”
IRS Get Transcript breach INVOLVES Stolen identity tax refund fraud
The breach was connected to fraudulent tax returns filed using stolen taxpayer identities.
Explicit Confidence 98% · Jack Rhysider EP 26 Details
“only 13,000 possibly fraudulent returns were filed for tax year 2014”