Qualified triples from the transcripts. Origin, speaker, and evidence stay attached. These are not independently verified facts.
India-Pakistan cyber-conflict INVOLVES Pakistan Cyber-Army
The historical tit-for-tat cyber-conflict involved the Pakistan Cyber-Army, which retaliated against Indian websites.
Explicit Confidence 98% · Jack Rhysider EP 51 Details
“a hacker group calling themselves The Pakistan Cyber-Army defaced the website of the Indian Oil and Natural Gas Company shortly after”
India-Pakistan cyber-conflict INVOLVES SCADA systems
Participants in the cyber-conflict discussed attempting to access SCADA and industrial machinery exposed to the internet.
Attributed Confidence 94% · Speaker2 EP 51 Details
“We are trying to access a few machineries. We are trying to access a few different companies, heavy machineries”
India-Pakistan cyber-conflict INVOLVES Indian hacker community
The Indian hacker community participated in the cyber-conflict by attacking Pakistani government websites.
Explicit Confidence 98% · Speaker1 EP 51 Details
“Indian hacker community – they took some action. They started attacking Pakistani government websites.”
Pulwama attack INVOLVES Jaish-e-Mohammed
The Pulwama attack involved Jaish-e-Mohammed, which was reported as claiming responsibility.
Attributed Confidence 98% · Reporter2 EP 51 Details
“Local newspapers reported that militant group Jaish-e-Mohammed has claimed responsibility for the attack.”
India-Pakistan cyber-conflict INVOLVES India
The cyber-conflict involved Indian hackers and Indian cyber activity against Pakistani targets.
Explicit Confidence 99% · Jack Rhysider EP 51 Details
“Tit for tat hacking has absolutely been going back and forth between Pakistan and India for a decade now.”
Pulwama attack TARGETS India
The attack targeted Indian troops in Kashmir and killed approximately forty of them.
Explicit Confidence 99% · Jack Rhysider EP 51 Details
“killing about forty troops”
Indian hacker community TARGETS .gov.pk
Indian hackers looked for Pakistani government websites ending in .gov.pk.
Explicit Confidence 99% · Jack Rhysider EP 51 Details
“They would look for any websites that ended in .gov.pk which is the top-level domain for Pakistani government websites.”
Jaish-e-Mohammed TARGETS India
Jack says the group’s mission is to separate Kashmir from India and place it under Pakistani rule.
Explicit Confidence 96% · Jack Rhysider EP 51 Details
“their mission is to separate Kashmir from India and move it under Pakistani rule”
Indian hacker community USES Website defacement
Indian hackers defaced Pakistani government websites and replaced their messages or images.
Explicit Confidence 98% · Speaker1 EP 51 Details
“They were DDossed and some of them were defaced.”
Indian hacker community USES SCADA systems
Some participants associated with the Indian hacker activity were trying to access internet-exposed SCADA-related machinery; the account does not establish that access succeeded.
Uncertain Confidence 82% · Speaker2 EP 51 Details
“There was a few more people who have experience in SCADA.”
“if they are open, if any of the end points is open to the internet, we are trying to hit it and trying to get access to it”
Indian hacker community USES SQL injection
The first Indian hacker Jack describes used SQL injection to enter a Pakistani government website.
Explicit Confidence 95% · Jack Rhysider EP 51 Details
“used SQL injection to get in”
Indian hacker community USES Google algorithm manipulation
Hackers allegedly manipulated Google Images results so a search for best toilet paper showed Pakistani imagery and Imran Khan.
Uncertain Confidence 93% · Jack Rhysider EP 51 Details
“Somehow the hackers rigged the Google algorithm so that if you search Google Images for best toilet paper, it shows a picture of Pakistan’s flag.”
Indian hacker community USES Credential exposure
The cyber-conflict included public posting of usernames and passwords obtained from websites.
Explicit Confidence 94% · Jack Rhysider EP 51 Details
“usernames and passwords posted”
Indian hacker community USES Distributed denial-of-service
Indian hackers used DDoS attacks against Pakistani government websites.
Explicit Confidence 98% · Speaker1 EP 51 Details
“They were DDossed and some of them were defaced.”
Indian hacker community USES Data dumping
The hackers dumped database contents publicly after obtaining them.
Explicit Confidence 95% · Jack Rhysider EP 51 Details
“took all the stuff from the database, and then publically dumped it for everyone to see”
Jack Rhysider USES Instagram
Jack says he uses Instagram to communicate with listeners and monitor activity.
Explicit Confidence 99% · Jack Rhysider EP 51 Details
“My Indian listeners often chat with me on Instagram”
British Airways data breach ASSOCIATED_WITH Magecart
RiskIQ's findings suggested that the British Airways breach may have involved the same Magecart skimming group or code, but the episode does not establish this as certain.
Uncertain Confidence 86% · Jack Rhysider EP 52 Details
“he was able to take this knowledge and searched his database of cashed websites to see if this same group might be hacking another website”
“the technique that we observed so many times”
Magecart ASSOCIATED_WITH Magento
Magecart originated in activity involving websites running Magento, although the group later expanded beyond Magento.
Explicit Confidence 94% · Jack Rhysider EP 52 Details
“the Magecart hacking group initially started as a single group in 2015”
“not all these sites that are compromised are running Magento. This is just where the term is originated from”
Newegg data breach ASSOCIATED_WITH Magecart
The Newegg breach was associated with the same skimming code and group observed in the British Airways incident, but the episode does not identify the perpetrators with certainty.
Uncertain Confidence 90% · Jack Rhysider EP 52 Details
“They did find the same skimming code on another website. This time, it was on the website newegg.com.”
“What happened there was it was another breach.”
RiskIQ researchers identified and internally named the group Magecart.
Explicit Confidence 98% · Jonathan Klijnsma EP 52 Details
“We had to give it a name internally to reference it and at some point, this turned into Magecart.”
British Airways data breach INVOLVES Modernizr skimmer
The British Airways breach involved a small skimmer added to the Modernizr JavaScript library.
Derived Confidence 94% · Jonathan Klijnsma EP 52 Details
“the file was a JavaScript library called Modernizr”
“they added a really, really, really tiny script”
Operation Deep Impact OPERATED_BY United States Secret Service
The Secret Service enacted Operation Deep Impact to combat the growing problem of credit-card skimming.
Explicit Confidence 99% · Jack Rhysider EP 52 Details
“the Secret Service has seen such a problem with it that they had to enact Operation Deep Impact to combat this”
Magecart Group 3 PART_OF Magecart
Magecart Group 3 is presented as one of the groups tracked under the broader Magecart name.
Derived Confidence 88% · Jack Rhysider EP 52 Details
“there’s Magecart hacking Group 2 and Group 3 and Group 4”
Magecart Group 2 PART_OF Magecart
Magecart Group 2 is presented as one of the groups tracked under the broader Magecart name.
Derived Confidence 88% · Jack Rhysider EP 52 Details
“there’s Magecart hacking Group 2 and Group 3 and Group 4”
Magecart Group 4 PART_OF Magecart
Magecart Group 4 is presented as one of the groups tracked under the broader Magecart name.
Derived Confidence 88% · Jack Rhysider EP 52 Details
“there’s Magecart hacking Group 2 and Group 3 and Group 4”