Claims
Qualified triples from the transcripts. Origin, speaker, and evidence stay attached.
These are not independently verified facts.
IRS Get Transcript breach
INVOLVES
Instant knowledge-based authentication
Attackers defeated the IRS's instant KBA by using personal information obtained from other breaches.
Explicit
Confidence 96%
· Jack Rhysider
EP 26
Details
“probably by using some personal information they obtained from other breaches”
Jack Rhysider ·
offsets 19551–19628
IRS Get Transcript breach
INVOLVES
Internal Revenue Service
The incident concerned unauthorized access to taxpayer records held by the IRS.
Explicit
Confidence 98%
· Jack Rhysider
EP 26
Details
“The unauthorized attempts to access information using the Get Transcript application”
Jack Rhysider ·
offsets 21485–21569
IRS Get Transcript breach
INVOLVES
Money mule
The fraud operation involved networks of money mules used to receive and transfer stolen tax refunds.
Explicit
Confidence 96%
· Jack Rhysider
EP 26
Details
“Then they had to set up a whole network of money mules”
Jack Rhysider ·
offsets 17922–17976
IRS Criminal Investigation Division
PART_OF
Internal Revenue Service
The IRS Criminal Investigation Division is described as a department within the IRS.
Explicit
Confidence 99%
· Jack Rhysider
EP 26
Details
“Within the IRS is a whole department called the IRS Criminal Investigation Division”
Jack Rhysider ·
offsets 26986–27069
Get Transcript
PART_OF
irs.gov
Get Transcript was introduced as a feature of the irs.gov website.
Explicit
Direction flagged
Confidence 99%
· Jack Rhysider
EP 26
Details
“they made a new feature to irs.gov website called Get Transcript”
Jack Rhysider ·
offsets 4816–4880
IRS Get Transcript breach
RELATED_TO
Anthem breach
Jack suggests that information stolen in the Anthem breach may have enabled the Get Transcript fraud, but he does not establish this as certain.
Uncertain
Confidence 82%
· Jack Rhysider
EP 26
Details
“This would probably be enough to pass the KBA and do the Get Transcript.”
Jack Rhysider ·
offsets 14006–14078
Kazeem
USES
Identity Protection Personal Identification Number
Kazeem obtained IRS IP PINs through the website and used them in filing fraudulent tax returns.
Explicit
Confidence 98%
· Jack Rhysider
EP 26
Details
“and also get the PINs from the website to submit tax returns for those people”
Jack Rhysider ·
offsets 29056–29133
Kazeem
USES
Get Transcript
Kazeem used the Get Transcript website process with purchased personal information to support fraudulent tax returns.
Explicit
Confidence 99%
· Jack Rhysider
EP 26
Details
“Kazeem then used this information to do Get Transcript on the irs.gov website”
Jack Rhysider ·
offsets 28978–29055
Internal Revenue Service
USES
Instant knowledge-based authentication
The IRS used instant knowledge-based authentication to verify users of Get Transcript.
Explicit
Confidence 99%
· Jack Rhysider
EP 26
Details
“The irs.gov website is different. They use something called instant KBA, or knowledge-based authentication.”
Jack Rhysider ·
offsets 5401–5509
J-Creek
USES
Turbo Tax
In the song quoted by Jack, J-Creek identifies TurboTax as a tool used in the tax-fraud activity being described.
Explicit
Confidence 88%
· Jack Rhysider
EP 26
Details
“He even said what tools he used, Turbo Tax.”
Jack Rhysider ·
offsets 32658–32701
Identity Protection Personal Identification Number
USES
Get Transcript
The IRS issued IP PINs as an additional safeguard for IRS accounts after the breach; attackers later targeted the PIN-recovery process.
Explicit
Confidence 93%
· Jack Rhysider
EP 26
Details
“we’re also giving them the opportunity to obtain an Identity Protection Personal Identification Number”
Jack Rhysider ·
offsets 20551–20653
Podcast chart manipulation
AFFECTS
Apple Podcast
The episode characterizes podcast chart manipulation or algorithm hacking as a way to corrupt or alter the Apple Podcast charts.
Explicit
Confidence 97%
· Jack Rhysider
EP 27
Details
“This is chart manipulation or algorithm hacking or something else.”
Jack Rhysider ·
offsets 9947–10013
“These shows are doing something to break the charts, to corrupt it.”
Jack Rhysider ·
offsets 5407–5474
Jison
ASSOCIATED_WITH
MD Monowar
Jison says that he learned podcast promotion from MD Monowar, whom he describes as his former boss and a leading promoter.
Explicit
Confidence 97%
· Jison
EP 27
Details
“Sir, in the past I learned from my boss.”
Jison ·
offsets 24260–24300
“His name is MD Monowar, sir.”
Jison ·
offsets 24496–24524
“everyone who learned about podcast promotion learned it from him”
Jack Rhysider ·
offsets 24855–24919
ResultSource
ASSOCIATED_WITH
New York Times Bestseller List
The episode says ResultSource has historically been accused of gaming the New York Times Bestseller List and appears to have obtained placements by organizing book purchases.
Uncertain
Confidence 94%
· Jack Rhysider
EP 27
Details
“clues led to a book marketing company called ResultSource”
Jack Rhysider ·
offsets 30990–31047
“They have historically been accused of gaming the New York Times Bestseller List.”
Jack Rhysider ·
offsets 31108–31189
“It appears this marketing company has figured out the algorithm”
Jack Rhysider ·
offsets 31510–31573
Seth Godin
AUTHORED
This is Marketing
Jack says Seth Godin has a new book titled This is Marketing.
Explicit
Confidence 99%
· Jack Rhysider
EP 27
Details
“Seth has a new book out. It’s called This is Marketing”
Jack Rhysider ·
offsets 49446–49501
Apple Podcast
SAME_AS
iTunes
Jack identifies Apple Podcast as also known as iTunes and later treats the Apple Podcast app and iTunes as the same service.
Explicit
Confidence 99%
· Jack Rhysider
EP 27
Details
“Over half my listeners listen to me on Apple Podcast, or otherwise known as iTunes”
Jack Rhysider ·
offsets 2174–2256
“the Apple Podcast app, or iTunes”
Jack Rhysider ·
offsets 2407–2439
Rakibul
USES
Artificial subscription and download activity
In the context of paid podcast promotion, Rakibul describes subscribing with Apple IDs; Jack presents this as the activity used to manipulate rankings.
Derived
Confidence 88%
· Rakibul
EP 27
Details
“Sir, I subscribe the Apple ID on iTunes.”
Rakibul ·
offsets 13364–13404
“I started seeing some patterns.”
Jack Rhysider ·
offsets 3260–3291
Promoter
USES
Fiverr
Podcast promoters offer their promotion services through Fiverr accounts.
Explicit
Confidence 98%
· Jack Rhysider
EP 27
Details
“They all pointed me to their Fiverr accounts.”
Jack Rhysider ·
offsets 11353–11398
“if you go on Fiverr and you search for podcast iTunes top rank, you’ll see dozens of people offering podcast promotion on iTunes.”
Jack Rhysider ·
offsets 11488–11617
Rakibul
USES
Apple ID
Rakibul says his promotion method involves subscribing with Apple IDs.
Explicit
Confidence 99%
· Rakibul
EP 27
Details
“Sir, I subscribe the Apple ID on iTunes.”
Rakibul ·
offsets 13364–13404
Promoter
USES
Artificial subscription and download activity
The promoter explains a repeated subscribe-and-download process using many accounts to increase a podcast's chart ranking.
Explicit
Confidence 99%
· Jack Rhysider
EP 27
Details
“Then stop the downloads, log out, and log in with a new Apple ID and do it again.”
Jack Rhysider ·
offsets 18683–18764
“Fifty, sixty. Yeah. Sometimes thirty, forty.”
Promoter ·
offsets 19387–19433
Promoter
USES
Apple ID
The unnamed promoter says he uses ten thousand Apple IDs for podcast promotion.
Explicit
Confidence 99%
· Promoter
EP 27
Details
“Yeah, I have ten thousand Apple ID, I have.”
Promoter ·
offsets 18816–18859
Sho Hag
USES
Artificial subscription and download activity
Sho Hag claims that his worldwide team promotes podcasts by subscribing, downloading, and listening.
Explicit
Confidence 98%
· Sho Hag
EP 27
Details
“My worldwide [00:15:00] team, they subscribe, download, and listens.”
Sho Hag ·
offsets 15683–15751
Rakibul
USES
iTunes
Rakibul says he performs the promotion through iTunes.
Explicit
Confidence 98%
· Rakibul
EP 27
Details
“I subscribe the Apple ID on iTunes.”
Rakibul ·
offsets 13369–13404
Promoter
USES
iTunes
The unnamed promoter describes carrying out the promotion in iTunes by signing in, subscribing, and downloading episodes.
Explicit
Confidence 98%
· Jack Rhysider
EP 27
Details
“Click connect, sign in with an Apple ID, go to the podcast URL, subscribe”
Jack Rhysider ·
offsets 18162–18235
“Clicking Get on all the episodes queues up all the downloads at once”
Jack Rhysider ·
offsets 18350–18418
Unit 8200
ASSOCIATED_WITH
CyberSpark
Unit 8200 headquarters is described as being located in the CyberSpark cyber-park.
Explicit
Confidence 97%
· Pm
EP 28
Details
“First thing is we have the Unit 8200 headquarters, our collection agency.”