Claims
Qualified triples from the transcripts. Origin, speaker, and evidence stay attached.
These are not independently verified facts.
SeaWorld DDoS
INVOLVES
denial-of-service attack
The incident involved denial-of-service attacks that knocked SeaWorld websites offline.
Explicit
Confidence 99%
· Jack Rhysider
EP 62
Details
“he was knocking websites offline with a few simple clicks of a button with a denial-of-service attack”
Jack Rhysider ·
offsets 18820–18930
Devon and Cornwall Police website DDoS
INVOLVES
Null routing
Jack says the website may have remained down because police IT staff null-routed the incoming traffic, but presents this as a likelihood rather than a confirmed fact.
Uncertain
Confidence 89%
· Jack Rhysider
EP 62
Details
“What likely happened was that somebody within the IT team at the police station just null-routed this incoming traffic”
Jack Rhysider ·
offsets 26537–26655
Bomb-threat allegations against US targets
INVOLVES
United States Secret Service
The Secret Service became involved in the case and sought Cam's extradition, according to Cam.
Explicit
Confidence 93%
· Cameron
EP 62
Details
“the Secret Service and the FBI, I believe they put in two requests to get me extradited”
Cameron ·
offsets 34057–34144
Devon and Cornwall Police website DDoS
INVOLVES
NTP amplification attack
The Devon and Cornwall Police website DDoS involved an NTP amplification attack.
Explicit
Confidence 99%
· Jack Rhysider
EP 62
Details
“For this one, he had his own dedicated server doing an NTP amplification attack.”
Jack Rhysider ·
offsets 25020–25100
Bomb-threat allegations against US targets
INVOLVES
FBI
The bomb-threat allegations included threats against the FBI, according to Cam's account of the charges.
Explicit
Confidence 99%
· Cameron
EP 62
Details
“there were bomb threats made against Delta Airlines, American Airlines, the White House, and the FBI.”
Cameron ·
offsets 32253–32354
SeaWorld DDoS
INVOLVES
Stressor
The SeaWorld DDoS incident involved Cam using a stressor to attack the organization's website.
Derived
Confidence 98%
· Jack Rhysider
EP 62
Details
“He would access the stressor, put in an IP of one of the animal parks, and start hitting it hard”
Jack Rhysider ·
offsets 15517–15613
Cameron
MEMBER_OF
Cyber Security Associates
Cam works at Cyber Security Associates as a senior SOC analyst / security professional.
Explicit
Confidence 99%
· Jack Rhysider
EP 62
Details
“Cam got the job at CSA”
Jack Rhysider ·
offsets 46763–46785
“I’m a senior SOC analyst.”
Cameron ·
offsets 56985–57010
Sean Tickle
MEMBER_OF
Cyber Security Associates
Sean identifies himself as the SOC manager at Cyber Security Associates.
Explicit
Confidence 99%
· Sean Tickle
EP 62
Details
“I’m the SOC manager at the CSA which is Cyber Security Associates.”
Sean Tickle ·
offsets 39279–39345
Operation Fun Kill
PART_OF
Anonymous
Cam describes Operation Fun Kill as part of an Anonymous operation.
Explicit
Confidence 99%
· Cameron
EP 62
Details
“he was involved in Operation Fun Kill which is part of like, Anonymous Operation”
Cameron ·
offsets 12817–12897
Devon and Cornwall Police website DDoS
TARGETS
Devon and Cornwall Police
The incident targeted the Devon and Cornwall Police website.
Explicit
Confidence 99%
· Jack Rhysider
EP 62
Details
“He launched it against the police department in his own town”
Jack Rhysider ·
offsets 26072–26132
SeaWorld DDoS
TARGETS
SeaWorld
The named SeaWorld DDoS incident targeted SeaWorld websites.
Explicit
Confidence 99%
· Jack Rhysider
EP 62
Details
“He continued to DDoS Sea World over and over.”
Jack Rhysider ·
offsets 21836–21881
Cameron
TARGETS
SeaWorld
Cam repeatedly used denial-of-service attacks against SeaWorld because of his objections to its treatment of animals.
Explicit
Confidence 98%
· Cameron
EP 62
Details
“I just basically started pressing buttons.”
Cameron ·
offsets 14344–14386
“Sea World. He just sends me this entire attack list that they’re all going for.”
Cameron ·
offsets 14219–14299
Operation Fun Kill
TARGETS
SeaWorld
Cam says Operation Fun Kill involved attacks against SeaWorld and related animal-rights targets.
Explicit
Confidence 97%
· Cameron
EP 62
Details
“he was involved in Operation Fun Kill which is part of like, Anonymous Operation. It has to do with Sea World”
Cameron ·
offsets 12817–12927
Cameron
USES
Network traffic sniffing
Cam connected the PlayStation through a computer and sniffed traffic to identify opponents' IP addresses.
Derived
Confidence 98%
· Jack Rhysider
EP 62
Details
“he’d watch all the IP addresses connecting to his PS3 in the game”
Jack Rhysider ·
offsets 7914–7979
Cameron
USES
Stressor
Cam says another participant in Operation Fun Kill gave him a free stressor, which he used to conduct attacks.
Explicit
Confidence 99%
· Cameron
EP 62
Details
“I was given a free stressor by someone that I knew.”
Cameron ·
offsets 11214–11265
Stressor
USES
denial-of-service attack
Jack characterizes a stressor as denial-of-service delivered as a service.
Explicit
Confidence 99%
· Jack Rhysider
EP 62
Details
“A stressor is simple DoS as a service”
Jack Rhysider ·
offsets 12043–12080
Stressor
USES
Botnet
Jack says a stressor provider may set up a botnet or servers to send large volumes of traffic.
Derived
Confidence 96%
· Jack Rhysider
EP 62
Details
“someone sets up a botnet or a bunch of servers capable of sending gigs and gigs of data”
Jack Rhysider ·
offsets 12085–12172
Cameron
USES
Security Information and Event Manager
Cam's apprenticeship included monitoring a Security Information and Event Manager system.
Explicit
Confidence 98%
· Cameron
EP 62
Details
“they gave me an apprenticeship in networking security and then monitoring on the SIEM”
Cameron ·
offsets 37636–37721
Low Orbit Ion Cannon
USES
denial-of-service attack
Jack explains that LOIC is used to flood an IP address and perform a denial-of-service attack.
Explicit
Confidence 99%
· Jack Rhysider
EP 62
Details
“This is called a denial-of-service attack, or DoS”
Jack Rhysider ·
offsets 3491–3540
Cameron
USES
Malicious link lure
Cam used a deceptive link, presented as evidence of wrongdoing, to persuade opponents to click it.
Derived
Confidence 97%
· Jack Rhysider
EP 62
Details
“His plan was to send his victim a link to a website that he had control over”
Jack Rhysider ·
offsets 4072–4148
Cameron
USES
Low Orbit Ion Cannon
Cam says he began using LOIC to attack opponents after learning how to disconnect them from the internet.
Explicit
Confidence 99%
· Cameron
EP 62
Details
“I started LOIC.”
Cameron ·
offsets 3047–3062
Cameron
USES
NTP amplification attack
Cam used an NTP amplification attack against the Devon and Cornwall Police website.
Explicit
Confidence 99%
· Cameron
EP 62
Details
“I DDossed it, sorry, with an NTP attack.”
Cameron ·
offsets 24821–24861
Cameron
USES
firewall
Cam says his security work included firewall management.
Explicit
Confidence 98%
· Cameron
EP 62
Details
“we did like, SIEM monitoring, firewall management”
Cameron ·
offsets 38853–38902
Operation Pig Roast
ASSOCIATED_WITH
CabinCr3w
The CabinCr3w hacking activity against police is presented as Operation Pig Roast.
Explicit
Confidence 94%
· Jack Rhysider
EP 63
Details
“The Anonymous Operation Pig Roast went into full effect.”
Jack Rhysider ·
offsets 12627–12683
“W0rmer joined up with a hacking crew called CabinCr3w”
Jack Rhysider ·
offsets 12773–12826
Higinio Ochoa
ASSOCIATED_WITH
Anonymous
Higinio says he adopted Anonymous because its ideals combined fun with social justice, while Jack emphasizes that Anonymous has no well-defined membership.
Explicit
Confidence 96%
· W0Rmer
EP 63
Details
“that kind of lent itself from the adoption of Anonymous by me”
W0Rmer ·
offsets 1974–2035
“Nobody is really a member of Anonymous.”
Jack Rhysider ·
offsets 3028–3067