Qualified triples from the transcripts. Origin, speaker, and evidence stay attached. These are not independently verified facts.
isanyoneup.com DEVELOPED_BY Hunter Moore
Hunter took an old domain and published nude photos there, later turning it into an anonymous revenge-porn posting site.
Explicit Confidence 99% · Jack Rhysider EP 34 Details
“Hunter took an old domain he had lying around called isanyoneup.com and published those photos there.”
yougotposted.com DEVELOPED_BY Kevin Bollaert
Kevin made and operated yougotposted.com as a site for anonymous users to upload revenge porn.
Explicit Confidence 99% · Jack Rhysider EP 34 Details
“Kevin’s website yougotposted.com was growing bigger and bigger.”
changemyreputation.com DEVELOPED_BY Kevin Bollaert
Kevin created changemyreputation.com to charge people for removing images from yougotposted.com.
Explicit Confidence 99% · Jack Rhysider EP 34 Details
“Kevin created a second site, changemyreputation.com”
The episode describes iCloud as Apple’s service.
Explicit Confidence 93% · Jack Rhysider EP 34 Details
“the hacker would send an e-mail to the celebrity claiming to be from Apple’s iCloud service”
Emilio Herrera DISCOVERED_BY FBI
The FBI traced the shared IP address to Emilio Herrera and identified him as a hacker who broke into celebrity accounts.
Explicit Direction flagged Confidence 99% · Jack Rhysider EP 34 Details
“The feds quickly determined Emilio was the hacker who broke into the celebrity accounts.”
Gary Jones EXPLOITS unauthorized access to a computer
Gary is described as hacking into victims’ accounts and later discussing the operation that obtained their images.
Derived Confidence 82% · Jack Rhysider EP 34 Details
“The FBI investigated the case and found in fact there was someone hacking into people’s accounts.”
Apple iCloud phishing campaign INITIAL_ACCESS_VIA phishing
The celebrity-account campaign obtained initial access through phishing emails and cloned login pages.
Explicit Confidence 99% · Jack Rhysider EP 34 Details
“the hacks were done by targeting individual people and then sending phishing e-mails to get into their iCloud logins.”
The Fappening INVOLVES FBI
The FBI investigated the celebrity-account hacks and arrested multiple hackers.
Explicit Confidence 99% · Jack Rhysider EP 34 Details
“When these hacks occurred Apple began working with the FBI to do an investigation.”
The Fappening INVOLVES The Fappening subreddit
A subreddit named The Fappening was created and became a major distribution point for the leaked images.
Explicit Confidence 99% · Jack Rhysider EP 34 Details
“Soon there was a subreddit called The Fappening and all the pics were posted there.”
The Fappening INVOLVES Bitcoin
The collector posted a Bitcoin address and asked viewers to provide tips for the leaked photos.
Explicit Confidence 99% · Jack Rhysider EP 34 Details
“The collector also posted their Bitcoin address, urging people that if they liked the nudes they can tip him some coin.”
The Fappening INVOLVES Jennifer Lawrence
Jennifer Lawrence’s account and nude photos were among the celebrity accounts and images involved in the leak.
Explicit Confidence 99% · Jack Rhysider EP 34 Details
“Jennifer Lawrence’s account”
The Fappening INVOLVES Reddit
The leaked images and links spread through Reddit, including the Fappening subreddit, which Reddit later banned.
Explicit Confidence 99% · Jack Rhysider EP 34 Details
“A week after it was created, Reddit banned The Fappening.”
Apple iCloud phishing campaign INVOLVES targeted open source intelligence-gathering
Attackers researched specific celebrities to find their email addresses and account-related information.
Explicit Confidence 99% · Jack Rhysider EP 34 Details
“First they did targeted open source intelligence-gathering on specific celebrities to try to find their e-mail address.”
Apple iCloud phishing campaign INVOLVES credential harvesting
The cloned iCloud page captured usernames and passwords in clear text.
Explicit Confidence 99% · Jack Rhysider EP 34 Details
“it would save that in clear text so the hacker could see it”
Apple iCloud phishing campaign INVOLVES Brute-force attack
Some attackers used iDict to cycle through commonly used passwords against iCloud accounts.
Explicit Confidence 99% · Jack Rhysider EP 34 Details
“Basically it’s a brute force login tool.”
The Fappening INVOLVES 4Chan
The collector publicly posted the celebrity nude collection on 4chan.
Explicit Confidence 99% · Jack Rhysider EP 34 Details
“They went over to /b/ on 4chan and posted over one hundred nude or mostly nude photos of female celebrities.”
The Fappening SAME_AS Celeb Gate
The episode says the massive celebrity nude leak was called The Fappening and that news outlets called it Celeb Gate.
Explicit Confidence 99% · Jack Rhysider EP 34 Details
“People started calling this massive leak of photos The Fappening.”
“news outlets thought the term The Fappening was disrespectful to the victims and they called it Celeb Gate.”
iDict USES Brute-force attack
iDict performs brute-force login attempts against an iCloud username and can bypass the lockout mechanism, according to the episode.
Explicit Confidence 96% · Jack Rhysider EP 34 Details
“iDict was somehow able to bypass that lockout mechanism.”
ElcomSoft was used to copy data from an iCloud storage account after obtaining the login information.
Explicit Confidence 99% · Jack Rhysider EP 34 Details
“they can use a tool like ElcomSoft to simply copy everything off that iCloud storage account.”
Social-Engineer Toolkit USES social engineering
The Social-Engineer Toolkit was described as a tool for creating the cloned login page and social-engineering victims.
Explicit Confidence 99% · Jack Rhysider EP 34 Details
“the social engineering toolkit which is a popular hacking tool designed to social engineer a victim”
Toucan was installed on and operated within ATMs running Windows.
Explicit Confidence 98% · Jornt v.d. Wiel EP 35 Details
“an ATM is just a computer running Windows so it’s possible to install malware on it”
ATM remote-login authentication bypass AFFECTS ATM
The authentication-bypass vulnerability affected an ATM's remote-login software.
Derived Confidence 93% · Jack Rhysider EP 35 Details
“there was a remote login to the ATM but it had a username and password”
The FBI had a case on the group and shared information with other investigators.
Explicit Confidence 99% · Jack Rhysider EP 35 Details
“even the FBI had cases on this group and were sharing information”
Carbanak ASSOCIATED_WITH Anunak
The name Carbanak incorporated the name of an Anunak configuration file.
Explicit Confidence 95% · Jornt v.d. Wiel EP 35 Details
“there was a configuration file called Anunak”
Carbanak ASSOCIATED_WITH Dutch police
The Dutch police worked with Kaspersky researchers and seized a command-and-control server connected to the operation.
Explicit Confidence 99% · Jornt v.d. Wiel EP 35 Details
“we also decided to work on this case together with the Dutch police”