Claims

Qualified triples from the transcripts. Origin, speaker, and evidence stay attached. These are not independently verified facts.

IRS Get Transcript breach INVOLVES Instant knowledge-based authentication

Attackers defeated the IRS's instant KBA by using personal information obtained from other breaches.

Explicit Confidence 96% · Jack Rhysider EP 26 Details

“probably by using some personal information they obtained from other breaches”

Jack Rhysider · offsets 19551–19628

IRS Get Transcript breach INVOLVES Internal Revenue Service

The incident concerned unauthorized access to taxpayer records held by the IRS.

Explicit Confidence 98% · Jack Rhysider EP 26 Details

“The unauthorized attempts to access information using the Get Transcript application”

Jack Rhysider · offsets 21485–21569

IRS Get Transcript breach INVOLVES Money mule

The fraud operation involved networks of money mules used to receive and transfer stolen tax refunds.

Explicit Confidence 96% · Jack Rhysider EP 26 Details

“Then they had to set up a whole network of money mules”

Jack Rhysider · offsets 17922–17976

IRS Criminal Investigation Division PART_OF Internal Revenue Service

The IRS Criminal Investigation Division is described as a department within the IRS.

Explicit Confidence 99% · Jack Rhysider EP 26 Details

“Within the IRS is a whole department called the IRS Criminal Investigation Division”

Jack Rhysider · offsets 26986–27069

Get Transcript PART_OF irs.gov

Get Transcript was introduced as a feature of the irs.gov website.

Explicit Direction flagged Confidence 99% · Jack Rhysider EP 26 Details

“they made a new feature to irs.gov website called Get Transcript”

Jack Rhysider · offsets 4816–4880

IRS Get Transcript breach RELATED_TO Anthem breach

Jack suggests that information stolen in the Anthem breach may have enabled the Get Transcript fraud, but he does not establish this as certain.

Uncertain Confidence 82% · Jack Rhysider EP 26 Details

“This would probably be enough to pass the KBA and do the Get Transcript.”

Jack Rhysider · offsets 14006–14078

Kazeem USES Identity Protection Personal Identification Number

Kazeem obtained IRS IP PINs through the website and used them in filing fraudulent tax returns.

Explicit Confidence 98% · Jack Rhysider EP 26 Details

“and also get the PINs from the website to submit tax returns for those people”

Jack Rhysider · offsets 29056–29133

Kazeem USES Get Transcript

Kazeem used the Get Transcript website process with purchased personal information to support fraudulent tax returns.

Explicit Confidence 99% · Jack Rhysider EP 26 Details

“Kazeem then used this information to do Get Transcript on the irs.gov website”

Jack Rhysider · offsets 28978–29055

Internal Revenue Service USES Instant knowledge-based authentication

The IRS used instant knowledge-based authentication to verify users of Get Transcript.

Explicit Confidence 99% · Jack Rhysider EP 26 Details

“The irs.gov website is different. They use something called instant KBA, or knowledge-based authentication.”

Jack Rhysider · offsets 5401–5509

J-Creek USES Turbo Tax

In the song quoted by Jack, J-Creek identifies TurboTax as a tool used in the tax-fraud activity being described.

Explicit Confidence 88% · Jack Rhysider EP 26 Details

“He even said what tools he used, Turbo Tax.”

Jack Rhysider · offsets 32658–32701

Identity Protection Personal Identification Number USES Get Transcript

The IRS issued IP PINs as an additional safeguard for IRS accounts after the breach; attackers later targeted the PIN-recovery process.

Explicit Confidence 93% · Jack Rhysider EP 26 Details

“we’re also giving them the opportunity to obtain an Identity Protection Personal Identification Number”

Jack Rhysider · offsets 20551–20653

Podcast chart manipulation AFFECTS Apple Podcast

The episode characterizes podcast chart manipulation or algorithm hacking as a way to corrupt or alter the Apple Podcast charts.

Explicit Confidence 97% · Jack Rhysider EP 27 Details

“This is chart manipulation or algorithm hacking or something else.”

Jack Rhysider · offsets 9947–10013

“These shows are doing something to break the charts, to corrupt it.”

Jack Rhysider · offsets 5407–5474

Jison ASSOCIATED_WITH MD Monowar

Jison says that he learned podcast promotion from MD Monowar, whom he describes as his former boss and a leading promoter.

Explicit Confidence 97% · Jison EP 27 Details

“Sir, in the past I learned from my boss.”

Jison · offsets 24260–24300

“His name is MD Monowar, sir.”

Jison · offsets 24496–24524

“everyone who learned about podcast promotion learned it from him”

Jack Rhysider · offsets 24855–24919

ResultSource ASSOCIATED_WITH New York Times Bestseller List

The episode says ResultSource has historically been accused of gaming the New York Times Bestseller List and appears to have obtained placements by organizing book purchases.

Uncertain Confidence 94% · Jack Rhysider EP 27 Details

“clues led to a book marketing company called ResultSource”

Jack Rhysider · offsets 30990–31047

“They have historically been accused of gaming the New York Times Bestseller List.”

Jack Rhysider · offsets 31108–31189

“It appears this marketing company has figured out the algorithm”

Jack Rhysider · offsets 31510–31573

Seth Godin AUTHORED This is Marketing

Jack says Seth Godin has a new book titled This is Marketing.

Explicit Confidence 99% · Jack Rhysider EP 27 Details

“Seth has a new book out. It’s called This is Marketing”

Jack Rhysider · offsets 49446–49501

Apple Podcast SAME_AS iTunes

Jack identifies Apple Podcast as also known as iTunes and later treats the Apple Podcast app and iTunes as the same service.

Explicit Confidence 99% · Jack Rhysider EP 27 Details

“Over half my listeners listen to me on Apple Podcast, or otherwise known as iTunes”

Jack Rhysider · offsets 2174–2256

“the Apple Podcast app, or iTunes”

Jack Rhysider · offsets 2407–2439

Rakibul USES Artificial subscription and download activity

In the context of paid podcast promotion, Rakibul describes subscribing with Apple IDs; Jack presents this as the activity used to manipulate rankings.

Derived Confidence 88% · Rakibul EP 27 Details

“Sir, I subscribe the Apple ID on iTunes.”

Rakibul · offsets 13364–13404

“I started seeing some patterns.”

Jack Rhysider · offsets 3260–3291

Promoter USES Fiverr

Podcast promoters offer their promotion services through Fiverr accounts.

Explicit Confidence 98% · Jack Rhysider EP 27 Details

“They all pointed me to their Fiverr accounts.”

Jack Rhysider · offsets 11353–11398

“if you go on Fiverr and you search for podcast iTunes top rank, you’ll see dozens of people offering podcast promotion on iTunes.”

Jack Rhysider · offsets 11488–11617

Rakibul USES Apple ID

Rakibul says his promotion method involves subscribing with Apple IDs.

Explicit Confidence 99% · Rakibul EP 27 Details

“Sir, I subscribe the Apple ID on iTunes.”

Rakibul · offsets 13364–13404

Promoter USES Artificial subscription and download activity

The promoter explains a repeated subscribe-and-download process using many accounts to increase a podcast's chart ranking.

Explicit Confidence 99% · Jack Rhysider EP 27 Details

“Then stop the downloads, log out, and log in with a new Apple ID and do it again.”

Jack Rhysider · offsets 18683–18764

“Fifty, sixty. Yeah. Sometimes thirty, forty.”

Promoter · offsets 19387–19433

Promoter USES Apple ID

The unnamed promoter says he uses ten thousand Apple IDs for podcast promotion.

Explicit Confidence 99% · Promoter EP 27 Details

“Yeah, I have ten thousand Apple ID, I have.”

Promoter · offsets 18816–18859

Sho Hag USES Artificial subscription and download activity

Sho Hag claims that his worldwide team promotes podcasts by subscribing, downloading, and listening.

Explicit Confidence 98% · Sho Hag EP 27 Details

“My worldwide [00:15:00] team, they subscribe, download, and listens.”

Sho Hag · offsets 15683–15751

Rakibul USES iTunes

Rakibul says he performs the promotion through iTunes.

Explicit Confidence 98% · Rakibul EP 27 Details

“I subscribe the Apple ID on iTunes.”

Rakibul · offsets 13369–13404

Promoter USES iTunes

The unnamed promoter describes carrying out the promotion in iTunes by signing in, subscribing, and downloading episodes.

Explicit Confidence 98% · Jack Rhysider EP 27 Details

“Click connect, sign in with an Apple ID, go to the podcast URL, subscribe”

Jack Rhysider · offsets 18162–18235

“Clicking Get on all the episodes queues up all the downloads at once”

Jack Rhysider · offsets 18350–18418

Unit 8200 ASSOCIATED_WITH CyberSpark

Unit 8200 headquarters is described as being located in the CyberSpark cyber-park.

Explicit Confidence 97% · Pm EP 28 Details

“First thing is we have the Unit 8200 headquarters, our collection agency.”

Pm · offsets 3837–3910