Claims

Qualified triples from the transcripts. Origin, speaker, and evidence stay attached. These are not independently verified facts.

United States Cyber Command ASSOCIATED_WITH National Security Agency

Jack says US Cyber Command is believed to have been the offensive team within the NSA and that it originated from the NSA before becoming independent.

Uncertain Confidence 95% · Jack Rhysider EP 50 Details

“US Cyber Command is believed to be the offensive team within the NSA. Actually, it came out of the NSA but now it’s its own thing.”

Jack Rhysider · offsets 7208–7339

ISIS media ASSOCIATED_WITH ISIS

ISIS media is described as the umbrella encompassing ISIS's magazines, videos, social-media accounts, websites, and related infrastructure.

Explicit Confidence 98% · Jack Rhysider EP 50 Details

“everything that was associated with that was what was under the umbrella of ISIS media”

Jack Rhysider · offsets 12426–12512

Operation Glowing Symphony COMPROMISES Domain controller

The operation planned to reach domain controllers as an initial foothold and later took over domain controllers during execution.

Explicit Confidence 96% · Jack Rhysider EP 50 Details

“Once you hit the domain controller, you’re good to go”

Jack Rhysider · offsets 45645–45698

“taking over domain controllers”

Jack Rhysider · offsets 47468–47498

ISIS media CONTAINS Dabiq

Dabiq is identified as one of ISIS media's flagship magazines.

Explicit Direction flagged Confidence 98% · Jack Rhysider EP 50 Details

“the Rumiyah and the Dabiq magazines were ISIS’s flagship magazine.”

Jack Rhysider · offsets 56282–56348

ISIS media CONTAINS Rumiyah

Rumiyah is identified as one of ISIS media's flagship magazines.

Explicit Direction flagged Confidence 98% · Jack Rhysider EP 50 Details

“the Rumiyah and the Dabiq magazines were ISIS’s flagship magazine.”

Jack Rhysider · offsets 56282–56348

Operation Glowing Symphony INVOLVES Joint Task Force ARES

Operation Glowing Symphony involved JTF-ARES as the task force carrying out the operation.

Explicit Confidence 99% · Jack Rhysider EP 50 Details

“JTF-ARES was formed to carry out a specific mission”

Jack Rhysider · offsets 21611–21662

“JTF-ARES was tasked to execute Operation Glowing Symphony”

Jack Rhysider · offsets 25368–25425

Operation Glowing Symphony INVOLVES lateral movement

The operation involved moving through accounts, servers, and the network according to a rehearsed sequence of targets.

Explicit Confidence 97% · Jack Rhysider EP 50 Details

“They started moving through parts of the network, moving through accounts, moving through servers, moving through everything”

Jack Rhysider · offsets 46914–47038

“They were pivoting and they were all dependent upon each other”

Jack Rhysider · offsets 43437–43499

Operation Glowing Symphony INVOLVES Email account compromise

The commander says that access to an email account is a common starting point for cyber-operations; Jack applies this possibility to Operation Glowing Symphony but does not establish it as a fully disclosed operation detail.

Uncertain Confidence 78% · Jack Rhysider EP 50 Details

“If Operation Glowing Symphony was getting into their e-mail accounts”

Jack Rhysider · offsets 41031–41099

“It’s access to that e-mail account.”

Jack Rhysider · offsets 39484–39519

Operation Glowing Symphony INVOLVES Credential pivoting

The operation used access to email accounts to pivot into associated accounts and services; the episode presents this as a description of the operation's access method, while the speaker withholds operation-specific details.

Attributed Confidence 84% · Jack Rhysider EP 50 Details

“You can pivot from the e-mail account into the other accounts associated to that e-mail”

Jack Rhysider · offsets 39959–40046

“You can pivot from that e-mail address into the AWS account, into the Cloudflare account”

Jack Rhysider · offsets 40107–40195

Operation Glowing Symphony OPERATED_BY Joint Task Force ARES

JTF-ARES was tasked to execute Operation Glowing Symphony.

Explicit Confidence 99% · Jack Rhysider EP 50 Details

“JTF-ARES was tasked to execute Operation Glowing Symphony”

Jack Rhysider · offsets 25368–25425

Barack Obama OTHER Operation Glowing Symphony

President Barack Obama is stated to have signed Task Order 16-0063, authorizing Operation Glowing Symphony to proceed.

Explicit Confidence 99% · Jack Rhysider EP 50 Details

“Task Order 16-0063 was signed by President Barack Obama and Operation Glowing Symphony was a go”

Jack Rhysider · offsets 25249–25344

Joint Task Force ARES TARGETS ISIS media

JTF-ARES conducts offensive cyber-operations against ISIS and specifically carried out missions to take down ISIS media.

Explicit Direction flagged Confidence 99% · Jack Rhysider EP 50 Details

“JTF-ARES is just cyber-specialists that focus in offensive cyber-operations against ISIS.”

Jack Rhysider · offsets 21671–21760

“JTF-ARES was tasked to execute Operation Glowing Symphony with their first mission to take out ISIS media.”

Jack Rhysider · offsets 25368–25474

Operation Glowing Symphony TARGETS ISIS media

The operation's objective was to disrupt and destroy as much of the ISIS media network as possible, including servers, domains, email accounts, and related infrastructure.

Explicit Confidence 99% · Jack Rhysider EP 50 Details

“we’re trying to have a symphony of destruction against the enemy here and take down all of the ISIS servers, domains, e-mails, whatever, at the same time.”

Jack Rhysider · offsets 24646–24800

“the first mission to take out ISIS media”

Jack Rhysider · offsets 22835–22881

Anonymous TARGETS ISIS

Anonymous publicly declared a cyber war against ISIS and said it would take down ISIS sites, accounts, and email.

Explicit Direction flagged Confidence 99% · Anon EP 50 Details

“we started a cyber war on ISIS”

Anon · offsets 33111–33141

“ISIS, we will hunt you, take down your sites, accounts, e-mails”

Anon · offsets 33161–33224

Operation Inherent Resolve TARGETS ISIS

Operation Inherent Resolve was initiated as the anti-ISIS coalition campaign and included strikes against ISIS infrastructure, leaders, and troops.

Explicit Direction flagged Confidence 98% · Jack Rhysider EP 50 Details

“the US military initiated executive order Operation Inherent Resolve”

Jack Rhysider · offsets 3714–3782

“that Navy ship was launching these missiles right into Mosul, raining down one attack after another, taking out ISIS infrastructure”

Jack Rhysider · offsets 4483–4614

Marine Forces Cyber Command USES Computer network exploitation

MARFORCYBER's mission includes offensive cyberspace operations, and its personnel were trained in computer network exploitation.

Explicit Confidence 91% · Jack Rhysider EP 50 Details

“They sent me to school for larger cyber-security stuff”

Jack Rhysider · offsets 8758–8812

“computer network exploitation boot camps and cyber-attack and defend”

Jack Rhysider · offsets 8923–8991

“To conduct full spectrum cyber-space operations, including conducting offensive cyber-space operations.”

Jack Rhysider · offsets 9322–9425

Jaish-e-Mohammed ASSOCIATED_WITH Pakistan

Jack describes Jaish-e-Mohammed as aligned with Pakistan.

Explicit Confidence 96% · Jack Rhysider EP 51 Details

“This is a Jihadist terrorist group active in the area of Kashmir but is aligned with Pakistan.”

Jack Rhysider · offsets 10561–10655

Pulwama attack ATTRIBUTED_TO Jaish-e-Mohammed

Local newspapers attributed responsibility for the attack to Jaish-e-Mohammed.

Attributed Confidence 98% · Reporter2 EP 51 Details

“Jaish-e-Mohammed has claimed responsibility for the attack”

Reporter2 · offsets 10415–10473

Jack Rhysider AUTHORED Darknet Diaries

Jack says the show is made by him.

Explicit Confidence 99% · Jack Rhysider EP 51 Details

“This show is made by me”

Jack Rhysider · offsets 40611–40634

India-Pakistan cyber-conflict COMPROMISES nic.in

Jack reports that Pakistani hackers gained control of nic.in, the registry for .in domains.

Attributed Confidence 97% · Jack Rhysider EP 51 Details

“In 2015, some Pakistani hackers got control of the website nic.in.”

Jack Rhysider · offsets 33308–33374

India-Pakistan cyber-conflict INVOLVES Malware

The historical cyber-conflict included malware sent in attacks against Pakistani companies and Indian embassies.

Explicit Confidence 98% · Jack Rhysider EP 51 Details

“malware being sent”

Jack Rhysider · offsets 32614–32632

“e-mail phishing attempts with nasty malware attached”

Jack Rhysider · offsets 32845–32897

India-Pakistan cyber-conflict INVOLVES phishing

The historical cyber-conflict included sophisticated phishing attempts against Pakistani companies and Indian embassies.

Explicit Confidence 98% · Jack Rhysider EP 51 Details

“This included some sophisticated phishing attempts”

Jack Rhysider · offsets 32559–32609

Pulwama attack INVOLVES Adil Ahmad Dar

The Pulwama attack involved Adil Ahmad Dar as the suicide bomber who drove the explosive-laden vehicle.

Explicit Confidence 99% · Aon EP 51 Details

“His name was Adil Ahmad Dar.”

Aon · offsets 28362–28390

“he blew up the van”

Aon · offsets 29316–29334

India-Pakistan cyber-conflict INVOLVES Ransomware

Historical Indian hacktivist activity in the conflict included a ransomware attack against a Pakistani airport.

Explicit Confidence 97% · Jack Rhysider EP 51 Details

“Indian hacktivists hit a Pakistani airport with ransomware”

Jack Rhysider · offsets 32252–32310

India-Pakistan cyber-conflict INVOLVES Pakistan

The cyber-conflict involved Pakistani hackers and Pakistani targets in reciprocal attacks with India.

Explicit Confidence 99% · Jack Rhysider EP 51 Details

“Tit for tat hacking has absolutely been going back and forth between Pakistan and India for a decade now.”

Jack Rhysider · offsets 31827–31932