Claims

Qualified triples from the transcripts. Origin, speaker, and evidence stay attached. These are not independently verified facts.

Person A POSSIBLY_SAME_AS Justin May

Sanad inferred that Person A in the indictment was Justin because Justin was the only person they knew from Wilmington, Delaware; the identification is presented as an inference rather than established fact.

Uncertain Confidence 86% · Sanad EP 46 Details

“We all only knew one person from Wilmington, Delaware; Justin”

Sanad · offsets 45399–45460

Durango SAME_AS XBox One

The episode identifies Durango as the code name for the Xbox One.

Explicit Confidence 99% · Jack Rhysider EP 46 Details

“the new [00:05:00] XBox which would be later known as the XBox One, but at that time, it was simply code-named Durango”

Jack Rhysider · offsets 3998–4116

Dylan USES eBay

Dylan used eBay to list photographs of a purported Durango rather than building a second unit.

Explicit Confidence 99% · Dylan EP 46 Details

“I might as well put it on eBay and see what attention I can get from it”

Dylan · offsets 8930–9001

Anthony USES FIFA

Anthony used FIFA-related hacking to create and sell in-game coins.

Explicit Confidence 97% · Jack Rhysider EP 46 Details

“Anthony decided to take what Nathan taught him and try to improve it”

Jack Rhysider · offsets 13590–13658

“Anthony and Austin started making good money doing this”

Jack Rhysider · offsets 13963–14018

Justin May USES Return Merchandise Authorization

Justin fraudulently requested replacement Cisco devices without returning the original devices, then sold the replacements.

Explicit Confidence 99% · Jack Rhysider EP 46 Details

“Justin knew this and figured out a way to trick Cisco into processing an RMA for him even though he didn’t have a router to send back”

Jack Rhysider · offsets 16154–16287

Arman USES Austin

Arman contacted Austin to arrange the sale of an authentic Durango.

Explicit Direction flagged Confidence 94% · Jack Rhysider EP 46 Details

“he reached out to Austin, one of the members of this XBox Underground, to tell him about it”

Jack Rhysider · offsets 21192–21283

Austin USES FIFA

Austin helped Anthony reverse-engineer FIFA and produce FIFA coins for sale.

Explicit Confidence 99% · Jack Rhysider EP 46 Details

“Austin, who was part of the group too, joined up and started helping Anthony make FIFA coins”

Jack Rhysider · offsets 13661–13753

Arman USES Xbox Developer Network

Arman sought Xbox Developer Network logins as payment for an authentic Durango.

Explicit Confidence 99% · Jack Rhysider EP 46 Details

“Arman wanted logins to the XBox Developer Network and a few thousand dollars for it”

Jack Rhysider · offsets 21550–21633

Arman USES badge cloning

Arman cloned a Microsoft employee badge to enter Microsoft's headquarters.

Explicit Confidence 99% · Jack Rhysider EP 46 Details

“He acquired a badge cloner and when his mom’s boyfriend came back, he was able to make a duplicate copy of that Microsoft employee badge”

Jack Rhysider · offsets 19042–19178

Xbox Underground USES Xbox Developer Network

XBox Underground used valid logins to access the Xbox Developer Network.

Explicit Confidence 99% · Jack Rhysider EP 46 Details

“They had a few valid logins for the XBox Developer’s Network and they’d log in with different accounts”

Jack Rhysider · offsets 2684–2786

Karma AFFECTS iMessage

Karma was described as being enabled by sending a crafted text through iMessage without user interaction.

Explicit Confidence 98% · Jack Rhysider EP 47 Details

“By sending this crafted text through iMessage, it enables the exploit.”

Jack Rhysider · offsets 45488–45558

Karma AFFECTS iPhone

Karma targeted iPhones and could reportedly extract data without requiring the user to click or interact.

Explicit Confidence 99% · Jack Rhysider EP 47 Details

“you can target iPhones with it”

Jack Rhysider · offsets 44642–44672

DarkMatter ASSOCIATED_WITH NISSA

The episode says DarkMatter continued working with the UAE government and NISSA, with the speaker hedging that it was probably continuing the espionage.

Uncertain Confidence 95% · Jack Rhysider EP 47 Details

“DarkMatter is operating and working with the UAE government and NISSA.”

Jack Rhysider · offsets 48046–48116

NISSA ASSOCIATED_WITH United Arab Emirates

NISSA was described as a secret part of the UAE government, analogous to the NSA.

Explicit Confidence 99% · Jack Rhysider EP 47 Details

“NISSA was the secret part of the UAE government which is similar to the NSA”

Jack Rhysider · offsets 12143–12218

DarkMatter ASSOCIATED_WITH United Arab Emirates

DarkMatter was described as a UAE company owned and operated by UAE citizens.

Explicit Confidence 99% · Jack Rhysider EP 47 Details

“DarkMatter is a UAE company owned and operated by UAE citizens.”

Jack Rhysider · offsets 46004–46067

Project Raven ASSOCIATED_WITH NISSA

Project Raven was tasked with helping NISSA conduct offensive cyber operations and collect information from targets.

Explicit Confidence 98% · Jack Rhysider EP 47 Details

“you’re gonna be helping NISSA conduct offensive cyber operations”

Jack Rhysider · offsets 12040–12104

Project Raven ATTRIBUTED_TO United Arab Emirates

The episode attributes Project Raven's hacking operations and contracting to the UAE government.

Explicit Direction flagged Confidence 99% · Jack Rhysider EP 47 Details

“It was the UAE government who was hiring them to conduct these hacks.”

Jack Rhysider · offsets 15474–15543

iMessage flaw DISCOVERED_BY Natalie Silvanovich

Natalie discovered three iPhone vulnerabilities while investigating how a Karma-like exploit might work; the episode does not establish that these were the exact Karma vulnerabilities.

Uncertain Confidence 88% · Jack Rhysider EP 47 Details

“she found three vulnerabilities on the iPhone”

Jack Rhysider · offsets 53774–53819

Karma EXPLOITS iMessage flaw

Karma appears to have exploited an iMessage flaw, but the episode explicitly says this is not certain.

Uncertain Confidence 91% · Jack Rhysider EP 47 Details

“it looks like it was exploiting a flaw in Apple’s iMessage”

Jack Rhysider · offsets 45427–45485

Lori Stroud MEMBER_OF Project Raven

Lori worked on the analysis team at Project Raven.

Explicit Confidence 99% · Jack Rhysider EP 47 Details

“One of the people in that analysis team was named Lori Stroud.”

Jack Rhysider · offsets 29983–30045

David MEMBER_OF National Security Agency

David worked as an analyst for the NSA from approximately August 2011 to August 2014.

Explicit Confidence 99% · Jack Rhysider EP 47 Details

“He started working for the NSA as an analyst there.”

Jack Rhysider · offsets 8182–8233

Lori Stroud MEMBER_OF DarkMatter

Lori moved from Project Raven to DarkMatter after the UAE terminated the Project Raven contract.

Explicit Confidence 99% · Jack Rhysider EP 47 Details

“Lori was one of the ones that moved onto DarkMatter.”

Jack Rhysider · offsets 46233–46285

David MEMBER_OF CyberPoint

David accepted a position with CyberPoint after leaving the NSA.

Explicit Confidence 98% · Jack Rhysider EP 47 Details

“There was this recruiter from a company called CyberPoint.”

Jack Rhysider · offsets 8766–8824

Lori Stroud MEMBER_OF National Security Agency

Lori worked for the NSA before joining Project Raven.

Explicit Confidence 99% · Jack Rhysider EP 47 Details

“After that, she went on to work for the NSA.”

Jack Rhysider · offsets 30295–30339

Lori Stroud MEMBER_OF Booz Allen Hamilton

Before Project Raven, Lori worked as a technology consultant for Booz Allen Hamilton.

Explicit Confidence 99% · Jack Rhysider EP 47 Details

“Lori was a technology consultant for a company called Booz Allen Hamilton.”

Jack Rhysider · offsets 30219–30293